mirror of
https://github.com/usestrix/strix.git
synced 2026-10-15 04:18:10 +00:00
certutil -N only skips its password prompt when it creates a fresh database. When the sandbox container is restarted, the NSS DB from the first run already exists, so certutil -N asks for the existing password and - with no TTY attached - spins forever in an "Invalid password. Try again." loop, burning a full core and blocking the rest of the entrypoint (the CA trust import never runs). Guard the call with a cert9.db existence check, the same approach mkcert uses (FiloSottile/mkcert#558). certutil -A re-import under the same nickname is safe to repeat, so restarts now complete cleanly. |
||
|---|---|---|
| .. | ||
| docker-entrypoint.sh | ||
| Dockerfile | ||