kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-09 20:26:33 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
d4e1103fc3d6b7c583073022bc052d0f983bc761
computer-playbook/scripts/system/tls/trust
T
History
kevinveenbirkenbachandClaude Fable 5 0e644f8599 fix(joomla): stream plugin dir via exec stdin; lint against container cp 
container cp needs its source on the node running the docker CLI, so
role_path sources break on swarm workers. The joomla plugin dir now
ships as a controller-side tarball through container exec -i. A new
repository lint forbids docker/container cp in tracked .yml and .sh
files; the six legitimate same-node uses carry justified nochecks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-04 17:05:56 +02:00
..
linux.sh
fix(joomla): stream plugin dir via exec stdin; lint against container cp
2026-07-04 17:05:56 +02:00
README.md
docs: fix repo-wide drift against documentation.md style rules
2026-05-15 20:12:07 +02:00
wsl2.sh
fix(joomla): stream plugin dir via exec stdin; lint against container cp
2026-07-04 17:05:56 +02:00

README.md

CA Trust Scripts 🔐

This directory contains platform-specific scripts for trusting the Infinito Root CA certificate on the developer's machine. For the canonical Make target index that invokes these helpers, see make.md.

All scripts extract the Root CA from a running Infinito container and install it into the appropriate system trust store, so that browsers and tools accept *.infinito.example TLS certificates without warnings.

Scripts 📄

linux.sh 🐧

Trusts the Infinito Root CA on the Linux host system.

  1. Extracts root-ca.crt from the running Infinito container via docker cp
  2. Places it under /etc/infinito.nexus/ca/root-ca.crt
  3. Installs it into the system trust store via roles/sys-ca-selfsigned/files/with-ca-trust.sh

Requires INFINITO_CONTAINER to be set to the name of the running container.

wsl2.sh 🪟

Trusts the Infinito Root CA on Windows from inside a WSL2 environment. Only executes when running on WSL2 (detected via /proc/version).

  1. Extracts root-ca.crt from the running container and copies it to the Windows Downloads folder
  2. Imports the certificate into the Windows CurrentUser Root trust store via PowerShell (no admin required)
  3. Discovers all configured domains from the nginx config inside the container
  4. Updates the Windows hosts file (C:\Windows\System32\drivers\etc\hosts) with 127.0.0.1 entries for all discovered domains (requires one UAC confirmation)

Related 🔗

  • ../. TLS administration scripts
  • roles/sys-ca-selfsigned/. generates the self-signed Root CA inside the container
Reference in new issue View Git Blame Copy Permalink