Added ability to automatically install self-signed root CA to Chromiu…

…m-based browsers (related to aerokube#225)
lorsatti · Apr 9, 2020 · 0b28883 · 0b28883
1 parent 2d6a58e
commit 0b28883
Show file tree

Hide file tree

Showing 14 changed files with 55 additions and 12 deletions.
diff --git a/selenium/base/base_6/Dockerfile b/selenium/base/base_6/Dockerfile
@@ -44,6 +44,7 @@ RUN \
     libfreetype6 \
     libxfont2 \
     libxft2 \
+    libnss3-tools \
     xfonts-base \
     xfonts-encodings \
     xfonts-utils \

diff --git a/selenium/base/java/Dockerfile b/selenium/base/java/Dockerfile
@@ -1,7 +1,7 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 RUN \
     apt-get update && \
     apt-get install -y openjdk-8-jre-headless && \
     apt-get clean && \
-    rm -Rf /tmp/*
+    rm -Rf /tmp/*
diff --git a/selenium/chrome/apt/Dockerfile b/selenium/chrome/apt/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION
 ARG CLEANUP

diff --git a/selenium/chrome/entrypoint.sh b/selenium/chrome/entrypoint.sh
@@ -10,6 +10,20 @@ if [ -z "$QUIET" ]; then
     DRIVER_ARGS="--verbose"
 fi
 
+ROOT_CA_PATH=${ROOT_CA_PATH:-""}
+if [ -r "$ROOT_CA_PATH" ]; then
+    ROOT_CA=$(<"$ROOT_CA_PATH")
+    ROOT_CA_NAME=$(basename "$ROOT_CA_PATH" | sed -e 's|.crt||g')
+fi
+
+ROOT_CA=${ROOT_CA:-""}
+if [ -n "$ROOT_CA" ]; then
+    ROOT_CA_NAME=${ROOT_CA_NAME:-"UserRootCA"}
+    mkdir -p ~/.pki/nssdb
+    certutil -d "sql:$HOME/.pki/nssdb" -N --empty-password
+    echo "$ROOT_CA" | certutil -d "sql:$HOME/.pki/nssdb" -A -t TC -n "$ROOT_CA_NAME"
+fi
+
 clean() {
   if [ -n "$FILESERVER_PID" ]; then
     kill -TERM "$FILESERVER_PID"

diff --git a/selenium/chrome/local/Dockerfile b/selenium/chrome/local/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION=noop
 ARG CLEANUP=noop

diff --git a/selenium/firefox/apt/Dockerfile.tmpl b/selenium/firefox/apt/Dockerfile.tmpl
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0@@REQUIRES_JAVA@@
+FROM selenoid/base:6.0@@REQUIRES_JAVA@@
 
 ARG VERSION
 ARG CLEANUP

diff --git a/selenium/firefox/local/Dockerfile.tmpl b/selenium/firefox/local/Dockerfile.tmpl
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0@@REQUIRES_JAVA@@
+FROM selenoid/base:6.0@@REQUIRES_JAVA@@
 
 ARG VERSION=noop
 ARG CLEANUP

diff --git a/selenium/opera/blink/apt/Dockerfile b/selenium/opera/blink/apt/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION
 ARG CLEANUP

diff --git a/selenium/opera/blink/entrypoint.sh b/selenium/opera/blink/entrypoint.sh
@@ -10,13 +10,27 @@ if [ -z "$QUIET" ]; then
     DRIVER_ARGS="--verbose"
 fi
 
+ROOT_CA_PATH=${ROOT_CA_PATH:-""}
+if [ -r "$ROOT_CA_PATH" ]; then
+    ROOT_CA=$(<"$ROOT_CA_PATH")
+    ROOT_CA_NAME=$(basename "$ROOT_CA_PATH" | sed -e 's|.crt||g')
+fi
+
+ROOT_CA=${ROOT_CA:-""}
+if [ -n "$ROOT_CA" ]; then
+    ROOT_CA_NAME=${ROOT_CA_NAME:-"UserRootCA"}
+    mkdir -p ~/.pki/nssdb
+    certutil -d "sql:$HOME/.pki/nssdb" -N --empty-password
+    echo "$ROOT_CA" | certutil -d "sql:$HOME/.pki/nssdb" -A -t TC -n "$ROOT_CA_NAME"
+fi
+
 clean() {
   if [ -n "$FILESERVER_PID" ]; then
     kill -TERM "$FILESERVER_PID"
   fi
   if [ -n "$XSELD_PID" ]; then
     kill -TERM "$XSELD_PID"
-  fi  
+  fi
   if [ -n "$XVFB_PID" ]; then
     kill -TERM "$XVFB_PID"
   fi

diff --git a/selenium/opera/blink/local/Dockerfile b/selenium/opera/blink/local/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION=noop
 ARG CLEANUP=noop

diff --git a/selenium/opera/presto/Dockerfile b/selenium/opera/presto/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0_java
+FROM selenoid/base:6.0_java
 
 ARG VERSION=12.16.1860
 ARG CLEANUP

diff --git a/selenium/yandex/apt/Dockerfile b/selenium/yandex/apt/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION=19.4.2.698-1
 ARG CLEANUP

diff --git a/selenium/yandex/entrypoint.sh b/selenium/yandex/entrypoint.sh
@@ -10,6 +10,20 @@ if [ -z "$QUIET" ]; then
     DRIVER_ARGS="--verbose"
 fi
 
+ROOT_CA_PATH=${ROOT_CA_PATH:-""}
+if [ -r "$ROOT_CA_PATH" ]; then
+    ROOT_CA=$(<"$ROOT_CA_PATH")
+    ROOT_CA_NAME=$(basename "$ROOT_CA_PATH" | sed -e 's|.crt||g')
+fi
+
+ROOT_CA=${ROOT_CA:-""}
+if [ -n "$ROOT_CA" ]; then
+    ROOT_CA_NAME=${ROOT_CA_NAME:-"UserRootCA"}
+    mkdir -p ~/.pki/nssdb
+    certutil -d "sql:$HOME/.pki/nssdb" -N --empty-password
+    echo "$ROOT_CA" | certutil -d "sql:$HOME/.pki/nssdb" -A -t TC -n "$ROOT_CA_NAME"
+fi
+
 clean() {
   if [ -n "$FILESERVER_PID" ]; then
     kill -TERM "$FILESERVER_PID"

diff --git a/selenium/yandex/local/Dockerfile b/selenium/yandex/local/Dockerfile
@@ -1,4 +1,4 @@
-FROM selenoid/base:5.0
+FROM selenoid/base:6.0
 
 ARG VERSION=noop
 ARG CLEANUP=noop