Skip to content

Missing CA Certificates in OCI image #2488

@mecseid

Description

@mecseid

Summary

The pack utility cannot download run images, as the ca-certificates package/content removed from the OCI image.

The #1951 removed these certificates from the image.


Reproduction

Steps
$ docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock  buildpacksio/pack:base builder inspect bellsoft/buildpacks.builder:musl
Inspecting builder: bellsoft/buildpacks.builder:musl
Current behavior
REMOTE:
ERROR: fetching builder image: connect to repo store "bellsoft/buildpacks.builder:musl": Get "https://index.docker.io/v2/": tls: failed to verify certificate: x509: certificate signed by unknown authority
Expected behavior

The OCI image contains the necessary CA certificates, and pack can download the run image.


Environment

pack info
$ docker run -ti --rm -v /var/run/docker.sock:/var/run/docker.sock  buildpacksio/pack:base report
Pack:
  Version:  0.38.2+git-f1c347c
  OS/Arch:  linux/amd64

Default Lifecycle Version:  0.20.11

Supported Platform APIs:  0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13

Config:
(no config file found at /root/.pack/config.toml)

Metadata

Metadata

Assignees

No one assigned

    Labels

    status/readyIssue ready to be worked on.type/bugIssue that reports an unexpected behaviour.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions