bottlerocket-os / bottlerocket-os/bottlerocket-control-container

Control container doesn't support bringing my own `ca-bundle.crt`

Open
#79 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
43
Forks
30
Avg merge
20h 49m
Merged PRs (30d)
1

Description

**Image I'm using:**
Latest

**Issue:**
The [certificate logic](https://github.com/bottlerocket-os/bottlerocket-control-container/blob/4e04695e7f4bb5ad05e9ea54b7f69c0ec4249487/start_control_ssm.sh#L18) used by control container doesn't account for a file that already exists with the same name.

This results in the following error:

```
host-containers@control[1394]: ln: failed to create symbolic link '/etc/pki/ca-trust/source/anchors/ca-bundle.crt': File exists
host-containers@control[1394]: time="2025-03-26T10:00:01Z" level=fatal msg="Container control exited with non-zero status"
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.