From 3e4a18a6d1f0cb82d3429ad788e75c7b40e2942e Mon Sep 17 00:00:00 2001
From: Wouter Deconinck <wdconinc@gmail.com>
Date: Sun, 14 Jul 2024 23:56:07 +0000
Subject: [PATCH] fix: write to /usr/local; convert pem to crt;
 update-ca-certificates

---
 containers/jug/dev.Dockerfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/containers/jug/dev.Dockerfile b/containers/jug/dev.Dockerfile
index 0b7f25db2..9cc4f50e3 100644
--- a/containers/jug/dev.Dockerfile
+++ b/containers/jug/dev.Dockerfile
@@ -131,7 +131,9 @@ spack repo add --scope site "${KEY4HEPSPACK_ROOT}"
 EOF
 
 ## Workaround for xrootd server, https://github.com/xrootd/xrootd/issues/2295
-ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /etc/ssl/certs/InCommon\ RSA\ Server\ CA\ 2.pem
+ADD https://spaces.at.internet2.edu/download/attachments/24576265/InCommon%20RSA%20Server%20CA%202.pem?api=v2 /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.pem
+RUN openssl x509 -outform der -in /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.pem -out /usr/local/share/ca-certificates/InCommon\ RSA\ Server\ CA\ 2.crt
+RUN update-ca-certificates
 
 ## ========================================================================================
 ## STAGE1: builder
-- 
GitLab