From 4b2f0ccb5425c3ec7c7112d40da602925724ec75 Mon Sep 17 00:00:00 2001
From: ItsDrike <itsdrike@protonmail.com>
Date: Thu, 18 Jul 2024 12:40:47 +0200
Subject: [PATCH] Fix binaries with hard-coded ssl cert files to
 /etc/ssl/cert.pem

---
 system/roles/workstation/runners.nix | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/system/roles/workstation/runners.nix b/system/roles/workstation/runners.nix
index 6b6fae4..f1fec0e 100644
--- a/system/roles/workstation/runners.nix
+++ b/system/roles/workstation/runners.nix
@@ -47,6 +47,11 @@ in {
         xorg.libX11
       ];
     };
+
+    # Some pre-compiled binaries hard-code ssl cert file to /etc/ssl/cert.pem
+    # instead of what NixOS uses (/etc/ssl/certs/ca-certificates.crt). Make a
+    # symlink there for compatibility.
+    # - For example the rye installed python binaries look there
+    environment.etc."ssl/cert.pem".source = "/etc/ssl/certs/ca-certificates.crt";
   };
 }
-