apostoliska

Hi all, I am testing the java 21 distroless image and find some differences compared to Java 17 related to cacerts. I am loading a custom trust store to /etc/ssl/certs/java/cacerts...

Yes, I can try to mount my trust store to _/usr/lib/jvm/temurin21_jdk_amd64/lib/security/cacerts_. I think this change should be noted. Using a custom trust store is quite frequent.

> Its not clear to me if we should add the symlinks and move the certs over to be consistent with the debian? I believe having the symlinks would be...

I think that gcr.io/distroless/java17-debian12 used the cacerts shipped with Debian. If that's the case, I believe the same should apply for java 21.

There is another issue that I am facing. I am using the below images: - gcr.io/distroless/java21-debian12:nonroot - gcr.io/distroless/java21-debian12:debug-nonroot I mount a custom cacerts to _/usr/lib/jvm/temurin21_jdk_amd64/lib/security/cacerts_ . The application is performing...