From ca8e372fe50d8f7ab7328f1b6c5aeb256b3c5fbe Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@redhat.com>
Date: Thu, 18 Oct 2018 15:35:26 +0200
Subject: [PATCH] move update-ca-trust

---
 prepare-root.sh | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/prepare-root.sh b/prepare-root.sh
index 8294348..0cf61b8 100755
--- a/prepare-root.sh
+++ b/prepare-root.sh
@@ -363,8 +363,6 @@ umount "$sysroot"/var/cache/dnf
 
 mkdir -p "$sysroot"/usr/share/factory/{var,cfg}
 
-chroot "$sysroot" update-ca-trust
-
 #---------------
 # tpm2-tss
 if [[ -f "$sysroot"/usr/lib/udev/rules.d/60-tpm-udev.rules ]]; then
@@ -646,6 +644,10 @@ if [[ -f "$sysroot"/etc/modprobe.d/kvm.conf ]]; then
     sed -i -e 's/#options/options/g' "$sysroot"/etc/modprobe.d/kvm.conf
 fi
 
+#---------------
+# CA
+chroot "$sysroot" update-ca-trust
+
 #---------------
 # var
 rm -fr "$sysroot"/var/lib/selinux