From ee9c392b403babcdfed1612924833795be719453 Mon Sep 17 00:00:00 2001
From: Tobias Henkel <tobias.henkel@bmw.de>
Date: Fri, 16 Mar 2018 16:29:40 +0100
Subject: [PATCH] Add standard ca certificate paths

When using the uri module in a base job it cannot validate ssl certs
unless you add the ca certificate paths to (un)trusted-ro-paths. This
seems a common use case so it makes sense to mount them into the bwrap
context by default if they are existing.

Change-Id: I2277374cdb8455dd9e39222ef0ecbab4c8ac786e
---
 zuul/driver/bubblewrap/__init__.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/zuul/driver/bubblewrap/__init__.py b/zuul/driver/bubblewrap/__init__.py
index 705935153c..6c22adc436 100644
--- a/zuul/driver/bubblewrap/__init__.py
+++ b/zuul/driver/bubblewrap/__init__.py
@@ -213,6 +213,7 @@ class BubblewrapDriver(Driver, WrapperInterface):
                      '/etc/nsswitch.conf',
                      '/etc/lsb-release.d',
                      '/etc/alternatives',
+                     '/etc/ssl/certs',
                      ]:
             if os.path.exists(path):
                 bwrap_command.extend(['--ro-bind', path, path])