Symbolicator service after switching to distro-less OS and self-signed certificates / root ca

[chris-laack]

Self-Hosted Version

25.10.0

CPU Architecture

x86_64

Docker Version

29.0.2

Docker Compose Version

2.40.3

Machine Specification

• [x] My system meets the minimum system requirements of Sentry

Steps to Reproduce

Our root ca can no longer be imported after updating to sentry version 25.10.0. The reason for this is the OS change for the symbolicator to distroless. Import via docker cp /tmp_install/self-hosted-{{ sentry_version }}/certificates/ca.crt sentry-self-hosted-symbolicator-1:/usr/local/share/ca-certificates is no longer possible.

see also post https://github.com/getsentry/self-hosted/issues/2789

Is this still necessary, and if so, how can we solve the problem?

Thank you in advance for your support.

Best regards,

Chris

Expected Result

If necessary, we need a solution to get our root CA into the image.

Actual Result

"Error response from daemon: Could not find the file /usr/local/share in container sentry-self-hosted-symbolicator-1", "stderr_lines": ["Error response from daemon: Could not find the file /usr/local/share in container sentry-self-hosted-symbolicator-1"], "stdout": "", "stdout_lines": []}

Event ID

No response