FROM quay.io/keycloak/keycloak:legacy

USER root
# Copy the CA certificate into the container
COPY Ruff-CA.crt /tmp/Ruff-CA.crt

# Import into the correct truststore
RUN keytool -import -trustcacerts -alias Ruff-CA \
    -file /tmp/Ruff-CA.crt \
    -keystore /usr/lib/jvm/java-11-openjdk-11.0.16.1.1-1.el8_6.x86_64/lib/security/cacerts \
    -storepass changeit -noprompt && \
    rm /tmp/Ruff-CA.crt