Skip to content

docs: add internal CA sandbox troubleshooting#25198

Open
dvdksn wants to merge 2 commits into
docker:mainfrom
dvdksn:codex/internal-ca-troubleshooting
Open

docs: add internal CA sandbox troubleshooting#25198
dvdksn wants to merge 2 commits into
docker:mainfrom
dvdksn:codex/internal-ca-troubleshooting

Conversation

@dvdksn
Copy link
Copy Markdown
Contributor

@dvdksn dvdksn commented May 28, 2026

Summary

Add troubleshooting guidance for Docker Sandboxes users whose internal HTTPS inspection proxy requires a custom CA certificate inside the sandbox. The section covers repeatable setup with a sandbox kit, one-off setup for existing sandboxes, Node.js CA configuration, and policy log diagnostics.

Generated by Codex

@netlify
Copy link
Copy Markdown

netlify Bot commented May 28, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit d5c2dd6
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a183cda5f06fb000856272d
😎 Deploy Preview https://deploy-preview-25198--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
@dvdksn dvdksn force-pushed the codex/internal-ca-troubleshooting branch from c0de444 to 2e69cb0 Compare May 28, 2026 12:06
Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The new "API calls fail with a certificate error" troubleshooting section is well-structured and technically clear. Commands use correct console language hints, YAML blocks are properly formatted, and the instructions are actionable and accurate.

No hedge words, bold misuse, marketing language, missing front matter, or broken shortcodes were found. The addition matches the existing document's scope and character.

Comment thread content/manuals/ai/sandboxes/troubleshooting.md Outdated
@dvdksn dvdksn marked this pull request as ready for review May 28, 2026 13:37
@dvdksn dvdksn requested review from a team, byjrack and robmry May 28, 2026 13:38
Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The added troubleshooting guidance for internal CA certificates is well-written and accurate. Both new sections follow Docker's documentation style guide: no AI-isms, correct command formatting, appropriate bold usage consistent with existing patterns, and accurate technical content (the kit file path mapping is correct). The content is appropriately scoped and no redirects are needed (new sections added to existing pages only).


commands:
install:
- command: "install -m 0644 /home/agent/internal-ca.crt /usr/local/share/ca-certificates/internal-ca.crt && update-ca-certificates"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

They need to get the cert to /home/agent/internal-ca.crt in the sandbox first?


environment:
variables:
NODE_EXTRA_CA_CERTS: /usr/local/share/ca-certificates/internal-ca.crt
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think this is needed if the cert is installed into the main bundle (by update-ca-certificates), and unless it appends to the variable (?) it might break things.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants