Getting certificate authorities into chrome

[cogentParadigm]

Hi there! Thanks for the lovely images! Do you have any recommendations on getting certificate authorities into the chrome container?

I can copy the cert into the container, install libssn3-tools and use certutil to add the certificate to chrome's certificate store. However, that's a bunch of steps I would like to streamline and need to automate. I could build a new image that way, but would prefer to have a way to inject the CA into a standard image.

I was thinking I may be able to mount in the store (cert9.db and key4.db), but not having luck with that so far.

My last option is to build a new image with libssn3-tools installed and a custom entrypoint script which handles adding the cert to the store before launching chrome, but would still like to explore simpler options before going down this road.