feat: update Docker configuration to include additional SSL certificate paths

Author: zJuuu

nix/docker.nix

@@ -126,13 +126,14 @@ let
           rustPackages."psyche-sidecar"
           python3Packages.huggingface-hub
           (pkgs.runCommand "entrypoint" { } ''
-            mkdir -p $out/bin $out/etc $out/tmp $out/var/tmp $out/run
+            mkdir -p $out/bin $out/etc/ssl/certs $out/tmp $out/var/tmp $out/run
             cp ${../docker/train_entrypoint.sh} $out/bin/train_entrypoint.sh
             cp ${../docker/sidecar_entrypoint.sh} $out/bin/sidecar_entrypoint.sh
             chmod +x $out/bin/train_entrypoint.sh
             chmod +x $out/bin/sidecar_entrypoint.sh
             ln -s ${bashInteractive}/bin/bash $out/bin/bash
             ln -s ${bashInteractive}/bin/bash $out/bin/sh
+            ln -s ${cacert}/etc/ssl/certs/ca-certificates.crt $out/etc/ssl/certs/ca-certificates.crt
           '')
         ]
         ++ cudaRuntimeLibs;
@@ -144,6 +145,8 @@ let
           "LD_LIBRARY_PATH=${lib.makeLibraryPath cudaRuntimeLibs}:/usr/local/nvidia/lib64:/lib:/usr/lib"
           "PATH=${lib.makeBinPath (with pkgs; [ bashInteractive coreutils curl findutils gnugrep ])}"
           "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-certificates.crt"
+          "CURL_CA_BUNDLE=${pkgs.cacert}/etc/ssl/certs/ca-certificates.crt"
+          "NIX_SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-certificates.crt"
           "LOGNAME=root"
           "TORCHINDUCTOR_CACHE_DIR=/tmp/torchinductor"
           "PYTHONUNBUFFERED=1"