gehealthcare/certinject repository overview

⁠Certificate injector scratch image

Container does NOT contain an OS, built with scratch baseimage.

⁠Build time usage (:alpine,:ubuntu,:debian tags)

Note: the reason why it's tagged :<distro> is that it adheres directory tree of <distro> image.

FROM gehealthcare/certinject:alpine as certs

FROM alpine
COPY --from=certs / /
...

(similarly for debian and ubuntu)

⁠List of files (full list, scratch baseimage)

/etc/ssl/certs/ca-certificates.crt
/usr/local/share/ca-certificates/GE_HealthCare_Root_CA_1.crt
/usr/local/share/ca-certificates/GE_HealthCare_Root_CA_2.crt

⁠Initcontainer usage (:init tag)

This container on execution injects Mozilla-maintained public Certificate Authority root certs as well as GE HealthCare's internal root certs into /data/ca-certificates.crt file, which can be shared with other containers using a shared storage area like EmptyDir.

Runs the below command with user/group 1000:1000

/cp.static /etc/ssl/certs/ca-certificates.crt /data/ca-certificates.crt

⁠List of files (full list, scratch baseimage)

/cp.static
/etc/ssl/certs/ca-certificates.crt
/usr/local/share/ca-certificates/GE_HealthCare_Root_CA_1.crt
/usr/local/share/ca-certificates/GE_HealthCare_Root_CA_2.crt

cp-static is a statically compiled simple copy binary.