From 2e0d55280266c9595a5ccddd8025d4f2bacd7945 Mon Sep 17 00:00:00 2001
From: Joerg Behrmann <behrmann@physik.fu-berlin.de>
Date: Wed, 11 May 2022 09:41:35 +0200
Subject: [PATCH] debian: include ca-certificates for bootstrap packages

apt throws warnings because it cannot verify the certificates for the security
repositories we included recently. We could add this to extra-packages, but then
ca-certificates is missing when we call apt update for the first time, so add it
to the debootsrap call.

Fixes: #962
---
 mkosi/__init__.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/mkosi/__init__.py b/mkosi/__init__.py
index b9777f361..83bcc3f43 100644
--- a/mkosi/__init__.py
+++ b/mkosi/__init__.py
@@ -2742,6 +2742,7 @@ def install_debian_or_ubuntu(args: MkosiArgs, root: Path, *, do_run_build_script
         cmdline: List[PathString] = [
             "debootstrap",
             "--variant=minbase",
+            "--include=ca-certificates",
             "--merged-usr",
             f"--components={','.join(repos)}",
         ]
-- 
2.47.2