Runners behind a proxy

[sk-securian]

I'm trying to test this out with some runners behind a proxy, and I have been trying to add the internal certificate trust via the NODE_EXTRA_CA_CERTS env variable, but even passing it through to the renovatebot/github-action step using the env-regex, it doesn't seem to fix this behavior. Wondering if anyone else has run into this or there might be another workaround?

My best guess is that nothing in the Dockerfile is there to copy the location of the certificate to the container for the java processes to use... if that's the case, is there a location that does get copied/should I be adding the trust to the repo?

[viceice]

no, sadly java has its own cert store. so you probably need to create a custom image.

heres how you can add your certs

• https://github.com/containerbase/base/blob/main/docs/custom-root-ca.md

[sk-securian]

Drats - thanks!