在基于Ubuntu的Docker镜像上安装TinyTex :无法验证‘s hui.org的证书

Question

我正在尝试建立一个Docker镜像，基于ubuntu:20.04，支持R和bookdown。但是我用tinytex::install_tinytex()得到了ERROR: cannot verify yihui.org's certificate [...]

> tinytex::install_tinytex()
trying URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz'
trying URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz'
--2020-11-23 09:19:05--  https://yihui.org/tinytex/TinyTeX-1.tar.gz
Resolving yihui.org (yihui.org)... 167.99.129.42, 134.209.226.211
Connecting to yihui.org (yihui.org)|167.99.129.42|:443... connected.
ERROR: cannot verify yihui.org's certificate, issued by 'CN=SSL-SG1-GROBU,OU=Operations,O=Cloud Services,C=US':
  Unable to locally verify the issuer's authority.
To connect to yihui.org insecurely, use `--no-check-certificate'.
Error in download.file(url, output, ..., method = method) :
  'wget' call had nonzero exit status
Calls: <Anonymous> ... download_file -> <Anonymous> -> download -> download.file
In addition: Warning messages:
1: In download.file(url, output, ..., method = method) :
  URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz': status was 'SSL peer certificate or SSH remote key was not OK'
2: In download.file(url, output, ..., method = method) :
  URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz': status was 'SSL peer certificate or SSH remote key was not OK'
You may have to restart your system after installing TinyTeX to make sure ~/bin appears in your PATH variable (https://github.com/yihui/tinytex/issues/16).
Execution halted

我需要找到一种方法来验证和信任来自yihui.org的证书链，因为我不被允许绕过--no-check-certificate的验证。

提前感谢您的任何提示！米海

Answer 1

默认docker映像没有安装证书，因此也没有根证书。这就是错误消息Unable to locally verify the issuer's authority所指示的内容。您可以从ca-certificates包(通过apt-get安装)获取根证书。