Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wget (curl subcomponent) requires /etc/ssl certs to https #2668

Open
tlaurion opened this issue May 1, 2023 · 1 comment
Open

wget (curl subcomponent) requires /etc/ssl certs to https #2668

tlaurion opened this issue May 1, 2023 · 1 comment
Labels
Bug Stuff that's wrong

Comments

@tlaurion
Copy link

tlaurion commented May 1, 2023

Doing PoC testing u-root provided tools in the goal of maybe adding Nix into heads in runtime (either ramfs or disk, will see how it goes). Was guided into trying to use https://install.determinate.systems, but communicating with their websites either require tls/openssl support which is a constraint in smaller systems' SPI. Opened issue DeterminateSystems/nix-installer#434 since they do not document the need of busybox's openssl (which is basically a wrapper and expects openssl-util binary helper to deal with TLS. Ugly to say the least).


In our u-root situation here, packing wget into u-root alone doesn't do it.
Two distinct -files statements need to pack /etc/ssl content (since /etc/ssl/private has different rights).

It would be nice if the dependencies could be packed automatically by the package. Discussed off-github with @rminnich at https://matrix.to/#/!cxigwGSzZmCNJEVtke:matrix.org/$rUBEM-iaNJ0stqkXPsHd08ANKoqKgWiD_Lg-M2BVuTY?via=matrix.org

/home/user/heads/build/x86/u-root/src/github.com/u-root/u-root \
-uroot-source /home/user/heads/build/x86/u-root/src/github.com/u-root \
-initcmd="" \
-build=gbb \
-defaultsh="" \
-files /etc/ssl/certs -files /etc/ssl/openssl.cnf \
-format=cpio \
-o /home/user/heads/build/x86/qemu-coreboot-whiptail-tpm1/u-root.cpio  \
github.com/u-root/u-root/cmds/core/wget 
@tlaurion tlaurion added the Bug Stuff that's wrong label May 1, 2023
@tlaurion tlaurion changed the title wget (curl subcomponent) requires /etc/ssl certs to be do https wget (curl subcomponent) requires /etc/ssl certs to https May 1, 2023
@tlaurion

This comment was marked as outdated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Stuff that's wrong
Projects
None yet
Development

No branches or pull requests

1 participant