fix ca-certificates issues

[lucabello]

Issue

Currently, the ca-certificates package is added to the rock, but it's missing the default certificates in /etc/ssl/certs.

This happens not because we don't stage them, but because stage-packages: [ca-certificates] doesn't run the maintainer scripts that would populate /etc/ssl/certs, so that folder stays empty.

Solution

The solution to this is to change stage-packages: to overlay-packages in the ca-certs part, because that also runs the maintainer scripts and correctly populates the /ets/ssl/certs folder.

Testing Instructions

You can test it yourself by simply running the rock and checking the certs are there via ls /etc/ssl/certs.

root@8f0199aebc08:/# which update-ca-certificates
/usr/sbin/update-ca-certificates
root@8f0199aebc08:/# ll /etc/ssl/certs/
total 604