[chore] added fedora support for docker dev setup

This commit is contained in:
Eric Schubert
2026-01-19 13:17:27 +01:00
committed by Eric Schubert
parent 929e2c8411
commit 28a8b656a2
2 changed files with 31 additions and 3 deletions
@@ -33,8 +33,10 @@ services:
networks:
- external
volumes:
# Linux
# Debian/Arch
- /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Fedora
- /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Mac OS
# - ~/.step/certs:/etc/ssl/certs
# - ~/.step/certs:/usr/local/share/ca-certificates
@@ -49,8 +51,10 @@ services:
networks:
- external
volumes:
# Linux
# Debian/Arch
- /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Fedora
- /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Mac OS
# - ~/.step/certs:/etc/ssl/certs
# - ~/.step/certs:/usr/local/share/ca-certificates
@@ -60,8 +64,10 @@ services:
networks:
- external
volumes:
# Linux
# Debian/Arch
- /etc/ssl/certs/ca-certificates.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Fedora
- /etc/pki/tls/certs/ca-bundle.crt:/etc/ssl/certs/ca-certificates.crt:ro
# Mac OS
# - ~/.step/certs:/etc/ssl/certs
# - ~/.step/certs:/usr/local/share/ca-certificates
@@ -347,6 +347,28 @@ update-ca-certificates
After that the generated root CA should be inside `/etc/ssl/certs/ca-certificates.crt`.
#### Fedora
On Fedora, you need to add the root CA to the trusted system authorities.
```shell
# Copy root certificate to any temporary location
docker compose --project-directory docker/dev/tls cp step:/home/step/certs/root_ca.crt $HOME/tmp/root_ca.crt
sudo cp $HOME/tmp/root_ca.crt /etc/pki/ca-trust/source/anchors/OpenProject_Development_Root_CA.crt
sudo update-ca-trust
```
#### Arch
On ArchLinux, you need to install the root CA into the trusted system authorities.
```shell
# Copy root certificate to any temporary location
docker compose --project-directory docker/dev/tls cp step:/home/step/certs/root_ca.crt $HOME/tmp/root_ca.crt
sudo install -Dm644 $HOME/tmp/root_ca.crt /etc/ca-certificates/trust-source/anchors/OpenProject_Development_Root_CA.crt
sudo update-ca-trust
```
#### NixOS
On NixOS, you need to add the generated root CA to system certificates bundle. To do so, you need to persist the