Adding a CA Cert for docker pull?

[Jason]

Hello,
I'm in the unfortunate situation where I need to configure a web proxy for access to the internet AND add that proxy's CA Cert in order to pull docker images. The proxy bit is quite easy and even documented, but what about the CA Cert? With the standard cloud-config there is a function for this, but it doesn't seem to exist in the coreos version. Is there an easy way to do this?

Many thanks

[Brandon Philips]

What is the cloud config directive that you are looking for? I haven't
done this myself but you should be able to write the certificate into
/etc/ssl/certs and then run `systemctl restart
update-ca-certificates.service`.

If that works out let me know and we will write-up a doc.

Thanks!

Brandon

[Michael Marineau]

Or run "sudo update-ca-certificates", no particular need to go through the systemd service.

[Jason]

Thanks guys, I was looking for the 'ca-certs' cloud-init directive, but you were both right. It was no problem to do without. So, based on your suggestions this is what I do:

write_files:
  - path: /etc/ssl/certs/my.pem
    permissions: 0644
    content: |
        -----BEGIN CERTIFICATE-----
        CERT_HERE
        -----END CERTIFICATE-----

runcmd:
 - [ sudo, update-ca-certificates ]

Thanks!