How to Fix Podman Image Pull Failures Caused by Zscaler on Windows
Podman on Windows runs Linux containers inside a dedicated Linux/WSL virtual machine that maintains its own certificate trust store, separate from Windows. When Zscaler intercepts HTTPS traffic, the Podman VM does not recognise the Zscaler root CA, causing image pulls to fail even when Windows itself trusts it. The fix involves exporting the Zscaler root certificate from the Windows certificate store using PowerShell, converting it to PEM format, and injecting it into the Podman VM via SSH. Once the certificate is placed under /etc/pki/ca-trust/source/anchors/ and update-ca-trust is run inside the VM, Podman can validate Zscaler-intercepted connections without requiring the insecure --tls-verify=false flag.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in