nixosTests.docker-tools: Add image-with-certs

2 files changed, 9 insertions, 3 deletions

diff --git a/nixos/tests/docker-tools.nix b/nixos/tests/docker-tools.nix
index d76f70b791c..21a727dbd97 100644
--- a/nixos/tests/docker-tools.nix
+++ b/nixos/tests/docker-tools.nix
@@ -424,5 +424,12 @@ import ./make-test-python.nix ({ pkgs, ... }: {
         docker.succeed("docker run --rm etc | grep localhost")
         docker.succeed("docker image rm etc:latest")
 
+    with subtest("image-with-certs"):
+        docker.succeed("<${examples.image-with-certs} docker load")
+        docker.succeed("docker run --rm image-with-certs:latest test -r /etc/ssl/certs/ca-bundle.crt")
+        docker.succeed("docker run --rm image-with-certs:latest test -r /etc/ssl/certs/ca-certificates.crt")
+        docker.succeed("docker run --rm image-with-certs:latest test -r /etc/pki/tls/certs/ca-bundle.crt")
+        docker.succeed("docker image rm image-with-certs:latest")
+
   '';
 })
diff --git a/pkgs/build-support/docker/examples.nix b/pkgs/build-support/docker/examples.nix
index 224ba07b774..1e9f07045e3 100644
--- a/pkgs/build-support/docker/examples.nix
+++ b/pkgs/build-support/docker/examples.nix
@@ -701,19 +701,18 @@ rec {
 
   # ensure that caCertificates builds
   image-with-certs = buildImage {
-    name = "curl";
+    name = "image-with-certs";
     tag = "latest";
 
     copyToRoot = pkgs.buildEnv {
       name = "image-with-certs-root";
       paths = [
-        pkgs.curl
+        pkgs.coreutils
         pkgs.dockerTools.caCertificates
       ];
     };
 
     config = {
-      Entrypoint = [ "/bin/curl" ];
     };
   };
 }