fix(ci): install ca-certificates in the bun web/docs-site jobs
apple / swift (push) Successful in 1m16s
ci / rust (push) Successful in 1m23s
ci / web (push) Successful in 25s
ci / docs-site (push) Successful in 28s
docker / build-push (., web/Dockerfile, punktfunk-web) (push) Successful in 6s
docker / build-push (ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora-rpm) (push) Successful in 5s
docker / build-push (ci, ci/rust-ci.Dockerfile, punktfunk-rust-ci) (push) Successful in 6s
docker / build-push (docs-site, docs-site/Dockerfile, punktfunk-docs) (push) Successful in 8s
deb / build-publish (push) Successful in 2m44s
docker / deploy-docs (push) Successful in 20s
rpm / build-publish (push) Successful in 5m6s

The oven/bun:1 image is Debian-slim and ships no CA bundle, so
actions/checkout's git-over-HTTPS fetch died with 'Problem with the SSL
CA cert (path? access rights?)' — curl error 77 (no CA bundle file),
not an untrusted cert; git.unom.io serves a public Let's Encrypt cert.
The rust/deb/rpm builder images already install ca-certificates; do the
same in the two slim bun jobs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-06-13 13:36:22 +00:00
parent 8970cfe188
commit 7f18b3dcd0
+9 -5
View File
@@ -77,10 +77,12 @@ jobs:
working-directory: web
steps:
# oven/bun ships neither git nor a real node (only a bun shim) — actions/checkout
# needs both.
- name: Install git + node
# needs both. The slim Debian base also lacks ca-certificates, so without it git's
# HTTPS fetch of the repo dies with "Problem with the SSL CA cert (path? access
# rights?)" — no CA bundle to validate git.unom.io's (public) Let's Encrypt cert.
- name: Install git + node + CA certs
working-directory: /
run: apt-get update && apt-get install -y --no-install-recommends git nodejs
run: apt-get update && apt-get install -y --no-install-recommends ca-certificates git nodejs
- uses: actions/checkout@v4
- name: Install dependencies
run: bun install --frozen-lockfile --ignore-scripts
@@ -100,9 +102,11 @@ jobs:
run:
working-directory: docs-site
steps:
- name: Install git
# ca-certificates: the slim Debian base lacks a CA bundle, so actions/checkout's
# HTTPS fetch otherwise fails with "Problem with the SSL CA cert" (see web job).
- name: Install git + CA certs
working-directory: /
run: apt-get update && apt-get install -y --no-install-recommends git
run: apt-get update && apt-get install -y --no-install-recommends ca-certificates git
- uses: actions/checkout@v4
- name: Install dependencies
run: bun install --frozen-lockfile --ignore-scripts