add ca-certificates to oci image

This is needed to validate letsencrypt's ca signed certs.
lsst-it · May 20, 2024 · 7f9e982 · 7f9e982
1 parent d6fb21c
commit 7f9e982
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/.hadolint.yaml b/.hadolint.yaml
@@ -0,0 +1,4 @@
+---
+ignored:
+  # disable pinning apk package versions
+  - DL3018
diff --git a/Dockerfile b/Dockerfile
@@ -3,7 +3,10 @@ WORKDIR /go/src/github.com/camptocamp/prometheus-puppetdb-exporter
 COPY . .
 RUN make prometheus-puppetdb-exporter
 
-FROM scratch
+FROM alpine:3
+RUN apk --update --no-cache add \
+    ca-certificates \
+    && rm -rf /root/.cache
 COPY --from=builder /go/src/github.com/camptocamp/prometheus-puppetdb-exporter/prometheus-puppetdb-exporter /
 ENTRYPOINT ["/prometheus-puppetdb-exporter"]
 CMD [""]