From 7f18b3dcd0d401fe61695ddf4a1f883f08938274 Mon Sep 17 00:00:00 2001 From: enricobuehler Date: Sat, 13 Jun 2026 13:36:22 +0000 Subject: [PATCH] fix(ci): install ca-certificates in the bun web/docs-site jobs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The oven/bun:1 image is Debian-slim and ships no CA bundle, so actions/checkout's git-over-HTTPS fetch died with 'Problem with the SSL CA cert (path? access rights?)' — curl error 77 (no CA bundle file), not an untrusted cert; git.unom.io serves a public Let's Encrypt cert. The rust/deb/rpm builder images already install ca-certificates; do the same in the two slim bun jobs. Co-Authored-By: Claude Opus 4.8 (1M context) --- .gitea/workflows/ci.yml | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 166a8d8..6a78d06 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -77,10 +77,12 @@ jobs: working-directory: web steps: # oven/bun ships neither git nor a real node (only a bun shim) — actions/checkout - # needs both. - - name: Install git + node + # needs both. The slim Debian base also lacks ca-certificates, so without it git's + # HTTPS fetch of the repo dies with "Problem with the SSL CA cert (path? access + # rights?)" — no CA bundle to validate git.unom.io's (public) Let's Encrypt cert. + - name: Install git + node + CA certs working-directory: / - run: apt-get update && apt-get install -y --no-install-recommends git nodejs + run: apt-get update && apt-get install -y --no-install-recommends ca-certificates git nodejs - uses: actions/checkout@v4 - name: Install dependencies run: bun install --frozen-lockfile --ignore-scripts @@ -100,9 +102,11 @@ jobs: run: working-directory: docs-site steps: - - name: Install git + # ca-certificates: the slim Debian base lacks a CA bundle, so actions/checkout's + # HTTPS fetch otherwise fails with "Problem with the SSL CA cert" (see web job). + - name: Install git + CA certs working-directory: / - run: apt-get update && apt-get install -y --no-install-recommends git + run: apt-get update && apt-get install -y --no-install-recommends ca-certificates git - uses: actions/checkout@v4 - name: Install dependencies run: bun install --frozen-lockfile --ignore-scripts