在基于 Ubuntu 的 Docker 镜像上安装 TinyTex：无法验证 yihui.org 的证书

Question

我正在尝试构建一个基于 ubuntu:20.04 的 Docker 映像，其中包含 R 和支持 PDF 的 bookdown。但我得到ERROR: cannot verify yihui.org's certificate [...] 和tinytex::install_tinytex()：

> tinytex::install_tinytex()
trying URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz'
trying URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz'
--2020-11-23 09:19:05--  https://yihui.org/tinytex/TinyTeX-1.tar.gz
Resolving yihui.org (yihui.org)... 167.99.129.42, 134.209.226.211
Connecting to yihui.org (yihui.org)|167.99.129.42|:443... connected.
ERROR: cannot verify yihui.org's certificate, issued by 'CN=SSL-SG1-GROBU,OU=Operations,O=Cloud Services,C=US':
  Unable to locally verify the issuer's authority.
To connect to yihui.org insecurely, use `--no-check-certificate'.
Error in download.file(url, output, ..., method = method) :
  'wget' call had nonzero exit status
Calls: <Anonymous> ... download_file -> <Anonymous> -> download -> download.file
In addition: Warning messages:
1: In download.file(url, output, ..., method = method) :
  URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz': status was 'SSL peer certificate or SSH remote key was not OK'
2: In download.file(url, output, ..., method = method) :
  URL 'https://yihui.org/tinytex/TinyTeX-1.tar.gz': status was 'SSL peer certificate or SSH remote key was not OK'
You may have to restart your system after installing TinyTeX to make sure ~/bin appears in your PATH variable (https://github.com/yihui/tinytex/issues/16).
Execution halted

我需要找到一种方法来验证和信任来自yihui.org 的证书链，因为我不允许绕过--no-check-certificate 的验证。

提前感谢您的任何提示！ 米海

Answer 1

默认的 docker 镜像没有安装证书，因此也没有根证书。这就是错误消息Unable to locally verify the issuer's authority 所指示的内容。您可以从包ca-certificates获取根证书（通过apt-get安装）。