FROM jlesage/firefox
COPY my-custom-root-ca.pem /etc/ssl/certs/
COPY policies.json /usr/lib/firefox/distribution/    # To force Firefox to use the system's CA certs
RUN apk add --no-cache ca-certificates
RUN update-ca-certificates   # Actually needed? Unsure
RUN cat /etc/ssl/certs/my-custom-root-ca.pem >> /etc/ssl/certs/ca-certificates.crt

docker exec -it <container_id> certutil -A -n "My Custom Root CA" -t "C,," -i /etc/ssl/certs/mycustom-root-ca.pem -d sql:/config/profile