From 36ec71f5d3db735a90ecf85edcadec685813ebbb Mon Sep 17 00:00:00 2001 From: Xiaofeng Wang Date: Mon, 16 Mar 2026 20:08:19 +0800 Subject: [PATCH] devenv: Explicitly install ca-certificates before curl The Debian sid base image may not include ca-certificates, and curl only Recommends (not Depends on) it. This causes curl to fail with SSL trust anchor errors when fetching the GitHub CLI keyring. Assisted-by: Claude Code (Opus 4.6) Signed-off-by: Xiaofeng Wang --- devenv/Containerfile.debian | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/devenv/Containerfile.debian b/devenv/Containerfile.debian index 6f123ca..0881df4 100644 --- a/devenv/Containerfile.debian +++ b/devenv/Containerfile.debian @@ -11,7 +11,7 @@ set -xeuo pipefail echo 'APT::Sandbox::User "root";' > /etc/apt/apt.conf.d/99sandbox-disable # Initialize some basic packages -apt -y update && apt -y install curl time bzip2 +apt -y update && apt -y install ca-certificates curl time bzip2 # Enable deb-src repositories for build-dep sed -i "s/^deb /deb [arch=$(dpkg --print-architecture)] /" /etc/apt/sources.list.d/debian.sources