Devcontainer Features

This repository contains a Dev Container Feature collection for SolarWinds.

Feature: cato

The cato feature installs a CATO SSL certificate in the container trust store and can configure Node.js/npm to use that certificate. Please note, the feature needs to be installed first (before any other feature, e.g., node, etc).

Published feature reference:

"features": {
  "ghcr.io/solarwinds/devcontainers/features/cato:1": {}
},
"overrideFeatureInstallOrder": [
  "ghcr.io/solarwinds/devcontainers/features/cato"
]

The feature installs the bundled Cato Networks Root CA and exports:

1. NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
2. SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
3. REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
4. CURL_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
5. NPM_CONFIG_CAFILE=/etc/ssl/certs/ca-certificates.crt

Support

Supported base images (with update-ca-certificates available):

1. Debian/Ubuntu-based
2. Alpine-based images

Operational expectations:

1. If ca-certificates tooling is missing, installation can bootstrap it using apt-get or apk.
2. Images without update-ca-certificates and without a supported package manager are not supported by this feature.

Certificate Lifecycle

Bundled certificate lifecycle details, validity period, and SHA-256 fingerprint are documented in src/cato/NOTES.md.

Contributing

Development, testing, and release instructions are maintained in CONTRIBUTING.md.

Security

Please review our security policy in SECURITY.md.