debian: include ca-certificates for bootstrap packages

apt throws warnings because it cannot verify the certificates for the security
repositories we included recently. We could add this to extra-packages, but then
ca-certificates is missing when we call apt update for the first time, so add it
to the debootsrap call.

Fixes: #962

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index b9777f361926063d3cb0d1e044a7a9147200e868..83bcc3f430388bf7865c2c3a3f80d79160ee2006 100644 (file)
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -2742,6 +2742,7 @@ def install_debian_or_ubuntu(args: MkosiArgs, root: Path, *, do_run_build_script
         cmdline: List[PathString] = [
             "debootstrap",
             "--variant=minbase",
+            "--include=ca-certificates",
             "--merged-usr",
             f"--components={','.join(repos)}",
         ]