Merge pull request #7312 from layus/fixed-output-system-cert

Allow system certs access to fixed-output derivations

src/libstore/build/local-derivation-goal.cc

@@ -1776,6 +1776,8 @@ void LocalDerivationGoal::runChild()
                 for (auto & path : { "/etc/resolv.conf", "/etc/services", "/etc/hosts" })
                     if (pathExists(path))
                         ss.push_back(path);
+
+                dirsInChroot.emplace(settings.caFile, "/etc/ssl/certs/ca-certificates.crt");
             }
 
             for (auto & i : ss) dirsInChroot.emplace(i, i);