Check root CA certificates into the repo instead of downloading at build time
Open
area-dockerfiles
- Dominant language
- C#
- Stars
- 181
- Forks
- 67
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 10
Description
Currently, the ImageBuilder Dockerfile downloads root CA certificates from `microsoft.com/pkiops` at build time:
https://github.com/dotnet/docker-tools/blob/30a3bfe0a3bbe1baae8ed261081f97147fc6c275/src/Dockerfile.linux#L9-L15
Instead, we should check the certificate files into the repo and `COPY` them in the Dockerfile. The certificates are public root CAs that change very infrequently, so there is no freshness benefit to downloading them on every build.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.