host-ctr: added host certs to host containers

Co-authored-by: Patrick J.P. Culp <[email protected]>
bottlerocket-os · Nov 27, 2024 · c7bdede · c7bdede
1 parent 2a673d6
commit c7bdede
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/sources/host-ctr/cmd/host-ctr/main.go b/sources/host-ctr/cmd/host-ctr/main.go
@@ -851,6 +851,12 @@ func withDefaultMounts(containerID string, persistentDir string) oci.SpecOpts {
 			Destination: "/etc/bottlerocket-release",
 			Source:      "/etc/os-release",
 		},
+		// Bottlerocket host certs for the container
+		{
+			Options:     []string{"bind", "ro"},
+			Destination: "/.bottlerocket/certs",
+			Source:      "/etc/pki/tls/certs",
+		},
 		// Bottlerocket RPM inventory available to the container
 		{
 			Options:     []string{"bind", "ro"},