code-server may sometimes fail to download extensions for your IDE because the remote extension marketplace URL is untrusted. This might happen for one of the following reasons:
- The image doesn't come with any
- Your organization is using an internal certificate authority
The following sections will show you how to correct these issues.
Adding Certificates for code-server
To add certificates to your image and have them recognized by code-server:
- Add the certificate(s) to the image
- Set the
NODE_EXTRA_CA_CERTSenvironment variable to the file in the image that contains the certificates
Finally, add the following to your dockerfile to ensure that code-server finds and uses the newly added certificates when it makes requests:
COPY my-certs.crt /etc/ssl/certs/my-certs.crt
ENV NODE_EXTRA_CA_CERTS /etc/ssl/certs/my-certs.crt
Adding Certificates at the System Level
You can add certificates at the system level so that any process that runs within the environment will use the certificates when making requests.
The specific process to add system-level certificates depends on the Linux distribution that you're using, but it is typically done by adding your certificates to your system's trusted CA repository.