diff --git a/.gitea/workflows/telegraf-snmp.yaml b/.gitea/workflows/telegraf-snmp.yaml
index 44bbbe0..707ae19 100644
--- a/.gitea/workflows/telegraf-snmp.yaml
+++ b/.gitea/workflows/telegraf-snmp.yaml
@@ -36,12 +36,14 @@ jobs:
           BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
           echo "=== Builder: $BUILDER ==="
           docker exec "$BUILDER" sh -c '
+            echo "=== SSL env vars in current shell ==="
+            env | grep -iE "ssl|cert|tls|ca_" || echo "none"
+            echo "=== SSL env vars of buildkitd (PID 1) ==="
+            cat /proc/1/environ 2>/dev/null | tr "\0" "\n" | grep -iE "ssl|cert|tls|ca_" || echo "none"
             echo "=== Certs in bundle ==="
             grep -c "BEGIN CERTIFICATE" /etc/ssl/certs/ca-certificates.crt 2>/dev/null || echo "bundle not found"
             echo "=== TLS test to harbor.lan ==="
             wget -qO /dev/null https://harbor.lan/ 2>&1 && echo "TLS OK" || echo "TLS FAILED"
-            echo "=== Last cert in bundle ==="
-            awk "/BEGIN CERT/{p=1} p{print} /END CERT/{p=0}" /etc/ssl/certs/ca-certificates.crt | tail -20
           '
 
       - name: Build and push image