How can I add a custom CA to the Docker image?

[roadSurfer]

We have a number of system that use certs we issue using our own CA. At the moment Kener cannot connect to these as it cannot verify the authenticy of the trust chain and thus the server.

I can obviously volume mount what I need, but one has to be root to run update-ca-certificates. I've tried setting NODE_EXTRA_CA_CERTS but didn't seem to have any effect.

Is there any way for me to add our CA into the Kener Docker image so it can access these services?

[roadSurfer]

Figured it out, it was a case of PEBKAC. The asset I wanted to access requires authetication, so there was a silent 401 and I had just assumed it was the cert.

With NODE_EXTRA_CA_CERTS correctly configured, I can pull non-autheticated icons etc without issue.