# docker-ca-trust

This is an example of a Docker image that bootstraps an internal CA.
It can serve as a pattern for trusting internal CAs, for any Ubuntu-based Docker image.
The CA URL and Fingerprint can be hardcoded in the `Dockerfile` or supplied as build arguments.

This image can be layered on top of any Ubuntu-based server image.
For example, change `FROM ubuntu:focal` to `FROM mongo` and you will get a MongoDB server that trusts your CA.
The CA certificate is stored in `/usr/local/share/ca-certificates/root_ca.crt` in the container.

To build it:

```
docker build . --build-arg CA_URL=https://ca.smallstep.com --build-arg CA_FINGERPRINT=abc123123
```