From a7d2a3d087f21c004716808c94c63c387b2e689b Mon Sep 17 00:00:00 2001 From: Guillaume Maudoux Date: Wed, 16 Nov 2022 15:23:59 +0100 Subject: Allow system certs access to fixed-output derivations --- src/libstore/build/local-derivation-goal.cc | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src') diff --git a/src/libstore/build/local-derivation-goal.cc b/src/libstore/build/local-derivation-goal.cc index 5cea3b590..a4ebd244f 100644 --- a/src/libstore/build/local-derivation-goal.cc +++ b/src/libstore/build/local-derivation-goal.cc @@ -1715,6 +1715,8 @@ void LocalDerivationGoal::runChild() for (auto & path : { "/etc/resolv.conf", "/etc/services", "/etc/hosts" }) if (pathExists(path)) ss.push_back(path); + + dirsInChroot.emplace(settings.caFile, "/etc/ssl/certs/ca-certificates.crt"); } for (auto & i : ss) dirsInChroot.emplace(i, i); -- cgit v1.2.3