From d17c3d96b61a38b8a1900ca3b08bafff8e863cd2 Mon Sep 17 00:00:00 2001
From: Florian Klink <flokli@flokli.de>
Date: Sun, 7 Jul 2024 17:16:36 +0300
Subject: refactor(tvix): point SSL_CERT_FILE to /dev/null

reqwest wants to be able to read a file of trust roots when constructed,
but as it doesn't actually do any HTTPS connections inside the nix
build, an empty list of trust roots is totally sufficient.

Thankfully /dev/null provides such a file.

Change-Id: I9bd1619b2c9f8ff2a6640d2ac410d4de5b20c2ea
Reviewed-on: https://cl.tvl.fyi/c/depot/+/11961
Autosubmit: flokli <flokli@flokli.de>
Tested-by: BuildkiteCI
Reviewed-by: aspen <root@gws.fyi>
---
 tvix/boot/tests/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'tvix/boot')

diff --git a/tvix/boot/tests/default.nix b/tvix/boot/tests/default.nix
index 31f69d11c83a..26640d6e921b 100644
--- a/tvix/boot/tests/default.nix
+++ b/tvix/boot/tests/default.nix
@@ -53,7 +53,7 @@ let
         buildCommand = ''
           touch $out
           # Ensure we can construct http clients.
-          export SSL_CERT_FILE="${pkgs.cacert.out}/etc/ssl/certs/ca-bundle.crt"
+          export SSL_CERT_FILE=/dev/null
 
           ${preStart}
 
-- 
cgit 1.4.1