Adding the cisco umbrella certificate to the Dockerfile (#10)

* fixing a port-forwarding issue

* more port forwarding fixes

* default documentation now refers to opening dev containers directly on the dev machine instead of using Codespaces

* Adding a line helping when a folder is not opened in a Dev Container

* adding a Philips Windows workaround that doesn't require turning off the Cisco umbrella service

* adding the cisco umbrella root certificate to the Dockerfile to avoid issues on Philips Windows machines

* moving certificate updates to before running other installations

* updated documentation to remove cisco workaround (no longer needed due to Dockerfile changes)

* workshop learning: the IPv6 issue does not seem to be mac specific

Author: RockLobster

.devcontainer/Dockerfile

@@ -1,5 +1,12 @@
 FROM mcr.microsoft.com/devcontainers/typescript-node:1-22-bullseye
 
+# Configure umbrella proxy for users behind this particular corporate proxy
+ENV NODE_EXTRA_CA_CERTS=/etc/ssl/certs/ca-certificates.crt
+
+RUN mkdir -p /usr/local/share/ca-certificates/extra && \
+    curl -o /usr/local/share/ca-certificates/extra/Cisco_Umbrella_Root_CA.crt https://d36u8deuxga9bo.cloudfront.net/certificates/Cisco_Umbrella_Root_CA.cer && \
+    update-ca-certificates
+
 # Install isolate-vm dependencies, these are needed by the @backstage/plugin-scaffolder-backend.
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
@@ -27,4 +34,4 @@ ENV PYTHON /usr/bin/python3
 
 RUN pip3 install setuptools
 
-ENV NODE_OPTIONS="${NODE_OPTIONS:-} --no-node-snapshot"
+ENV NODE_OPTIONS="${NODE_OPTIONS:-} --no-node-snapshot"

docs/getting-started.md

@@ -56,9 +56,10 @@ the Backstage app running, please check the following:
     and 7007. The codespace is mapping the ports to your local ports. Ensure
     you have no other processes running on those ports and both ports are mapped, you may have to manually add port 7007 in the vscode UI.
 
-!!! Warning "Known macOS issue"
+!!! Warning "Known IPv6 issue"
 
-    Backstage has a known issue on macOS that causes the backstage website to not load, see [here](https://github.com/backstage/backstage/issues/24888). To work around this, please go to `backstage/app-config.yaml` and update the `app` block by explicitly setting the host:
+    Backstage has a known issue with IPv6 that causes the backstage website to not load, see [here](https://github.com/backstage/backstage/issues/24888). 
+    To work around this, please go to `backstage/app-config.yaml` and update the `app` block by explicitly setting the host:
     ```
     app:
         title: Scaffolded Backstage App
@@ -67,12 +68,6 @@ the Backstage app running, please check the following:
             host: 0.0.0.0
     ```
 
-!!! Warning "Cisco Umbrella causes TLS errors"
-
-    If you see TLS errors when running `yarn` commands, this is most likely due to the Cisco Umbrella service trying to inject a custom SSL certificate.  
-    To work around this issue, please first export the following environment variable:
-    `export NODE_TLS_REJECT_UNAUTHORIZED=0`
-
 ## Authentication
 
 For this workshop we will need to authenticate with GitHub in order to create