utils: also sync root CA to remote cosa

We need this so that the remote cosa can also access resources signed by the root CA.
coreos · Oct 4, 2022 · 99c69fb · 99c69fb
1 parent a91e344
commit 99c69fb
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/utils.groovy b/utils.groovy
@@ -204,6 +204,13 @@ def addOptionalRootCA() {
             cp $ROOT_CA /etc/pki/ca-trust/source/anchors/
             /usr/lib/coreos-assembler/update-ca-trust-unpriv
         ''')
+        // Also sync it over to the remote if we're operating in a remote session
+        shwrap('''
+        if [ -n "${COREOS_ASSEMBLER_REMOTE_SESSION:-}" ]; then
+            cosa remote-session sync {,:}/etc/pki/ca-trust/anchors/
+            cosa shell -- /usr/lib/coreos-assembler/update-ca-trust-unpriv
+        fi
+        ''')
     }
 }