# Install Intel CA5A cert so Intel certs are recognized

RUN dnf install -y ca-certificates wget unzip \
  && wget -qO tmp.zip http://certificates.intel.com/repository/certificates/IntelSHA2RootChain-Base64.zip \
     && unzip tmp.zip -d /usr/share/pki/ca-trust-source/anchors \
     && rm tmp.zip \
  && wget -qO tmp.zip http://certificates.intel.com/repository/certificates/Intel%20Root%20Certificate%20Chain%20Base64.zip \
     && unzip tmp.zip -d /usr/share/pki/ca-trust-source/anchors \
     && rm tmp.zip \
  && dnf remove -y unzip \
  && update-ca-trust

# NOTE -- we don't remove 'wget' because that uninstalls gpgme, which breaks the
# system