ca-certificates

FROM scratch AS build
ARG BUILD_VERSION
COPY --from=stagex/core-busybox . /
COPY --from=stagex/core-binutils . /
COPY --from=stagex/core-make . /
COPY --from=stagex/core-musl . /
COPY --from=stagex/core-gcc . /
COPY --from=stagex/core-openssl . /
COPY --from=stagex/core-perl . /
ADD fetch/ca-certificates-${BUILD_VERSION}.tar.gz .
ADD fetch/certdata.txt .
WORKDIR /ca-certificates-${BUILD_VERSION}
ADD *.patch .
RUN --network=none <<-EOF
	set -eux
	patch -p1 < remove-timestamp.patch
	rm -f ./certdata.txt
	mv ../certdata.txt ./certdata.txt
	make
	make install DESTDIR=/rootfs
	mv cert.pem /rootfs/etc/ssl/certs/ca-certificates.crt
EOF
FROM stagex/core-filesystem AS package
COPY --from=build /rootfs/ /