From dffd771e7c9f48a0a63f9bc945ce1ee3c9afaa69 Mon Sep 17 00:00:00 2001
From: Charles Hall <charles@computer.surgery>
Date: Sat, 27 Jan 2024 12:23:57 -0800
Subject: [PATCH] add ca certificates to the OCI image

Without this, checking the authority of TLS certificates fails, making
Conduit (rightly) refuse to connect to anything.
---
 flake.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/flake.nix b/flake.nix
index a16ea58c..31a84131 100644
--- a/flake.nix
+++ b/flake.nix
@@ -167,6 +167,9 @@
         pkgs.dockerTools.buildImage {
           name = package.pname;
           tag = "next";
+          copyToRoot = [
+            pkgs.dockerTools.caCertificates
+          ];
           config = {
             # Use the `tini` init system so that signals (e.g. ctrl+c/SIGINT)
             # are handled as expected