Merge docker's and system's CA certificates

[h0tbird]

Check this task and comment to understand why this is needed.

[h0tbird]

This seems to permanently fix the issue:

sudo cp /etc/docker/certs.d/internal-registry-sys.marathon:5000/ca.crt /etc/ssl/certs/cell-1.dub.pem                                     
sudo update-ca-certificates
sudo rm -rf /etc/docker/certs.d/internal-registry-sys.marathon:5000
sudo systemctl restart docker

[h0tbird]

I think this systemd unit must be modified to enable the certificate rehashing:

core@worker-1 ~ $ systemctl cat update-ca-certificates.service 
# /usr/lib64/systemd/system/update-ca-certificates.service
[Unit]
Description=Update CA bundle at /etc/ssl/certs/ca-certificates.crt
# Since other services depend on the certificate store run this early
DefaultDependencies=no
Wants=systemd-tmpfiles-setup.service clean-ca-certificates.service
After=systemd-tmpfiles-setup.service clean-ca-certificates.service
Before=sysinit.target
ConditionPathIsReadWrite=/etc/ssl/certs
# Do nothing if update-ca-certificates has never been run before
ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt

[Service]
Type=oneshot
ExecStart=/usr/sbin/update-ca-certificates --skip-rehash

[h0tbird]

http://serverfault.com/a/782936/359718

[h0tbird]

Fixed by ee51132