live-build: can't use third party repo due to missing ca-certificates

Hello all,

I'm trying to make a custom Debian live build.

I want to include the Proton VPN client in the image, but they use their own package repo.

When I include the required files under `config/archives/` and run `lb build`, the package manager complains that it can't trust the repo's SSL certificate as the certificate authorities root certificate is not available. I believe these are normally provided by the package `ca-certificates` and located under `/usr/share/ca-certificates`.

I've tried installing `ca-certificates` into the live-build's chroot, but of course this is done after the index files are fetched, so it doesn't stop the package manager moaning about the Proton repo. I've also tried downloading the `ca-certificates` package onto my host system and extracting the certs before copying them to `config/includes.bootstrap/usr/share/`, but no dice.

Any help is much appreciated.

PS. I don't want to disable the authentication in APT

Statistics: Posted by Synthguy — 2024-11-16 17:40 — Replies 1 — Views 58

---