From: Peter van Dijk <peter.van.dijk@powerdns.com>
Date: Fri, 4 Feb 2022 11:40:20 +0000 (+0100)
Subject: dnsdist Docker image: install ca-certificates
X-Git-Tag: auth-4.7.0-alpha1~18^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=d256ad02c53c470b9fb035fe4b29daeb686e9734;p=thirdparty%2Fpdns.git

dnsdist Docker image: install ca-certificates
---

diff --git a/Dockerfile-dnsdist b/Dockerfile-dnsdist
index 8406ada438..468c039759 100644
--- a/Dockerfile-dnsdist
+++ b/Dockerfile-dnsdist
@@ -68,8 +68,11 @@ FROM debian:10-slim
 # Reusable layer for base update - Should be cached from builder
 RUN apt-get update && apt-get -y dist-upgrade && apt-get clean
 
-# Ensure python3 and jinja2 is present (for startup script), and python3-atomicwrites (for backend management), and tini (for signal management)
-RUN apt-get install -y python3 python3-jinja2 python3-atomicwrites tini libcap2-bin && apt-get clean
+# - python3 and jinja2 (for startup script)
+# - python3-atomicwrites (for backend management)
+# - tini (for signal management)
+# - ca-certificates (for verifying downstream DoH/DoT certificates)
+RUN apt-get install -y python3 python3-jinja2 python3-atomicwrites tini libcap2-bin ca-certificates && apt-get clean
 
 # Output from builder
 COPY --from=builder /build /