Re: [meta-virtualization][PATCH] docker: make ca-certificates a packageconfig

[Bruce Ashfield <bruce.ashfield@gmail.com>]

In message: [meta-virtualization][PATCH] docker: make ca-certificates a packageconfig
on 24/08/2025 Patrick Vogelaar via B4 Relay via lists.yoctoproject.org wrote:

> Moving ca-certificates into a packageconfig allows using docker without
> installing all the certificates.

I don't have (many) issues with the patch, but in my experience you
can't work with any registries or services with the certs being present.

Are you installing them some other way ? or using some alternative ?

Since the defaults aren't changed by this patch, I'll definitely merge
it. I'd just like to make sure that it won't create a hidden/non-working
configuration.

Bruce

> 
> Signed-off-by: Patrick Vogelaar <patrick.vogelaar@belden.com>
> ---
>  recipes-containers/docker/docker.inc | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/recipes-containers/docker/docker.inc b/recipes-containers/docker/docker.inc
> index 94ee34db..c464bc3c 100644
> --- a/recipes-containers/docker/docker.inc
> +++ b/recipes-containers/docker/docker.inc
> @@ -10,7 +10,6 @@ RDEPENDS:${PN} = "util-linux util-linux-unshare iptables \
>                    ${@bb.utils.contains('DISTRO_FEATURES', 'aufs', 'aufs-util', '', d)} \
>                    ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', '', 'cgroup-lite', d)} \
>                    bridge-utils \
> -                  ca-certificates \
>                   "
>  RDEPENDS:${PN} += "virtual-containerd ${VIRTUAL-RUNTIME_container_runtime}"
>  
> @@ -37,10 +36,11 @@ RPROVIDES:${PN}-dev += "docker-dev"
>  RPROVIDES:${PN}-contrip += "docker-dev"
>  
>  inherit pkgconfig
> -PACKAGECONFIG ??= "docker-init seccomp"
> +PACKAGECONFIG ??= "docker-init seccomp ca-certs"
>  PACKAGECONFIG[seccomp] = "seccomp,,libseccomp"
>  PACKAGECONFIG[docker-init] = ",,,docker-init"
>  PACKAGECONFIG[transient-config] = "transient-config"
> +PACKAGECONFIG[ca-certs] = ",,,ca-certificates"
>  
>  GO_IMPORT = "import"
>  
> -- 
> 2.34.1
> 
> 
> **********************************************************************
> DISCLAIMER:
> Privileged and/or Confidential information may be contained in this message. If you are not the addressee of this message, you may not copy, use or deliver this message to anyone. In such event, you should destroy the message and kindly notify the sender by reply e-mail. It is understood that opinions or conclusions that do not relate to the official business of the company are neither given nor endorsed by the company. Thank You.

> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#9357): https://lists.yoctoproject.org/g/meta-virtualization/message/9357
> Mute This Topic: https://lists.yoctoproject.org/mt/114864158/1050810
> Group Owner: meta-virtualization+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/meta-virtualization/unsub [bruce.ashfield@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>