From 2abcb7b777664bc8cb9e5ab750b953001cb4f3dd Mon Sep 17 00:00:00 2001
From: Debarshi Ray <rishi@fedoraproject.org>
Date: Wed, 28 May 2025 15:17:11 +0200
Subject: teams/cloud/container: Add p11-kit-client to Toolbx

This will be used by toolbox(1) to ensure that the certificates from
certificate authorities (or CAs) that are available inside a Toolbx
container are kept synchronized with the host operating system [1].  Any
program that uses PKCS #11 to access CA certificates should see the same
ones both inside the container and on the host.

This is the same approach taken by Flatpak [2].

[1] https://github.com/containers/toolbox/issues/626

[2] Flatpak commit 66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/commit/66b2ff40f7caf3a7
    https://github.com/flatpak/flatpak/pull/1757
    https://github.com/p11-glue/p11-kit/issues/68

https://pagure.io/fedora-kiwi-descriptions/pull-request/189
---
 teams/cloud/container.xml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'teams/cloud')

diff --git a/teams/cloud/container.xml b/teams/cloud/container.xml
index 6902cc3..812a559 100644
--- a/teams/cloud/container.xml
+++ b/teams/cloud/container.xml
@@ -256,6 +256,7 @@
 		<package name="nss-mdns"/>
 		<package name="openssh-clients"/>
 		<package name="openssl"/>
+		<package name="p11-kit-client"/>
 		<package name="pam"/>
 		<package name="pigz"/>
 		<package name="policycoreutils"/>
-- 
cgit v1.3.1+13