From 85388479839e1302cb885144c8c76642094bc448 Mon Sep 17 00:00:00 2001 From: Zhijie Yang Date: Mon, 8 Jul 2024 10:15:27 +0200 Subject: [PATCH] feat(24.04): add sed to ca-certs_bins and add comments --- slices/ca-certificates.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/slices/ca-certificates.yaml b/slices/ca-certificates.yaml index e4c137541..1c39e4eba 100644 --- a/slices/ca-certificates.yaml +++ b/slices/ca-certificates.yaml @@ -28,6 +28,8 @@ slices: ] content.write("/etc/ca-certificates.conf", "\n".join(names)) + # The `_data` slice only provides the bundled certificates and the config file. + # To keep the individual certificates, this slice should be included. data-keep-certs: essential: - ca-certificates_data @@ -37,9 +39,11 @@ slices: bins: essential: - openssl_bins + # The `/usr/sbin/update-ca-certificates` script requires sed to run. + - sed_bins contents: # To run update-ca-certificates without breaking the default certificates - # at /etc/ssl/certs/ca-certificates.crt, the ca-certificates_default-certs slice + # at /etc/ssl/certs/ca-certificates.crt, the ca-certificates_keep-certs slice # should also be included. For details, see the `update-ca-certificates` script. /usr/sbin/update-ca-certificates: