From 9c2599dd9b380e61c0bcb6f069e0c81334efd95d Mon Sep 17 00:00:00 2001
From: dresi <git@dresi.wtf>
Date: Wed, 10 Jun 2026 15:17:57 +0200
Subject: [PATCH] next try to fix tls verify in buidlkit upload to harbor.lan

---
 .gitea/workflows/telegraf-snmp.yaml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/telegraf-snmp.yaml b/.gitea/workflows/telegraf-snmp.yaml
index a38f6b2..bcab9e0 100644
--- a/.gitea/workflows/telegraf-snmp.yaml
+++ b/.gitea/workflows/telegraf-snmp.yaml
@@ -32,8 +32,10 @@ jobs:
       - name: Trust internal CA in BuildKit container
         run: |
           BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
-          echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" | \
-            docker exec -i "$BUILDER" sh -c 'cat >> /etc/ssl/certs/ca-certificates.crt'
+          echo "Builder: $BUILDER"
+          echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/internal-ca.crt
+          docker cp /tmp/internal-ca.crt "$BUILDER":/usr/local/share/ca-certificates/internal-ca.crt
+          docker exec "$BUILDER" update-ca-certificates
           docker restart "$BUILDER"
           sleep 5