Test installing ca-certificates temporarily

[adombeck]

Only for testing, do not merge.

[3v1n0]

Maybe you can just mount /etc/ssl?

[adombeck]

Maybe you can just mount /etc/ssl?

I think that's exactly what I'm doing in canonical/desktop-engineering@299fdf8, or do you mean something else?

I don't understand why it's failing on Plucky though. I can't repeat the issue in a Plucky Docker container on my local machine - there the apt update works fine after:

1. installing ca-certificates
2. adding the PPA
3. making a backup of /etc/ssl
4. removing ca-certificates
5. restoring the backup of /etc/ssl

[adombeck]

I don't understand why it's failing on Plucky though.

It's also failing on Questing with the same error - the job succeeds however, because golang-1.25 is available in the questing archives.

It doesn't seem like we can simply remove ca-certificates and just keep what it puts in /etc/ssl. I also tried keeping what it puts in /usr/share/ca-certificates, but that also fails. It doesn't install much more, and if we're keeping everything it installs there's not much point in removing the package, so I'm tempted to just keep the package installed.