install custom ca cert

Containerfile

@@ -10,15 +10,17 @@ LABEL com.github.containers.toolbox="true" \
 # Install extra packages as well as libnss-myhostname
 COPY extra-packages /
 
+# Install custom CA cert
+COPY aussielunix_Root_CA_168848365996868199089383065266162030969.crt /usr/local/share/ca-certificates/
+
 RUN sed -Ei '/apt-get (update|upgrade)/s/^/#/' /usr/local/sbin/unminimize \
     && apt-get update -yq \
     && apt-get -yq dist-upgrade \
     && DEBIAN_FRONTEND=noninteractive apt-get -yq install \
       libnss-myhostname ubuntu-minimal ubuntu-standard \
       $(cat extra-packages | xargs) \
     && yes | /usr/local/sbin/unminimize && echo '' \
-    && apt-get clean
-RUN rm /extra-packages
-
-# Fix empty bind-mount to clear selinuxfs (see #337)
-RUN mkdir /usr/share/empty
+    && apt-get clean \
+    && rm /extra-packages \
+    && mkdir /usr/share/empty \
+    && update-ca-certificates --verbose --fresh

aussielunix_Root_CA_168848365996868199089383065266162030969.crt

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----