From 68d8fa6d42de3468f94e2d7d43b805bd4e0f32b1 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sun, 4 Oct 2020 03:14:53 +0100
Subject: [PATCH] third_party/go: inject SSL_CERT_FILE into built containers

---
 third_party/default.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/third_party/default.nix b/third_party/default.nix
index 4056b5fe52..96571c7f4f 100644
--- a/third_party/default.nix
+++ b/third_party/default.nix
@@ -25,7 +25,12 @@ rec {
         in origOut // {
           dockerImage = nixpkgs.dockerTools.buildImage {
             name = args.name;
-            config = { Cmd = [ "${origOut}/bin/${args.name}" ]; };
+            config = {
+              Cmd = [ "${origOut}/bin/${args.name}" ];
+              Env = [
+                "SSL_CERT_FILE=${nixpkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+              ];
+            };
           };
         };
     };