diff options
author | Sebastiaan van Stijn <thaJeztah@users.noreply.github.com> | 2021-07-06 11:53:37 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-07-06 11:53:37 +0200 |
commit | 6d88407ac299b10bbf9e01e1dc5a66895d1564a2 (patch) | |
tree | 12ed9546c25323f7eac87f508ce791f8aa52a53c /contrib | |
parent | 2b5427b85371633c94d6c3ed3ae769d67c79f500 (diff) | |
parent | 8610d8ce4cd28fe17c0867fbcb0714135ba9bbb8 (diff) | |
download | docker-6d88407ac299b10bbf9e01e1dc5a66895d1564a2.tar.gz |
Merge pull request #42457 from AkihiroSuda/rootless-tumbleweed-etc-ssl
rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed
Diffstat (limited to 'contrib')
-rwxr-xr-x | contrib/dockerd-rootless.sh | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/contrib/dockerd-rootless.sh b/contrib/dockerd-rootless.sh index e342c26097..c1b521d2fa 100755 --- a/contrib/dockerd-rootless.sh +++ b/contrib/dockerd-rootless.sh @@ -118,5 +118,15 @@ else # https://github.com/moby/moby/issues/41230 chcon system_u:object_r:iptables_var_run_t:s0 /run fi + + if [ "$(stat -c %T -f /etc)" = "tmpfs" ] && [ -L "/etc/ssl" ]; then + # Workaround for "x509: certificate signed by unknown authority" on openSUSE Tumbleweed. + # https://github.com/rootless-containers/rootlesskit/issues/225 + realpath_etc_ssl=$(realpath /etc/ssl) + rm -f /etc/ssl + mkdir /etc/ssl + mount --rbind ${realpath_etc_ssl} /etc/ssl + fi + exec dockerd $@ fi |