refactor(devcontainer): remove custom CA workarounds per PR feedback

Author: stewartadam

.devcontainer/README.md

@@ -100,7 +100,10 @@ gitleaks detect --source . --verbose
 
 Container won't build: Ensure Docker Desktop is running and you have sufficient disk space (5GB+).
 
-Extensions not loading: Reload the window (`F1` → **Developer: Reload Window**).
+1. **Extensions not loading**: Reload the window (`F1` → **Developer: Reload Window**).
+
+2. **HTTP/TLS errors during build**: Machines with corporate firewalls performing TLS inspection should ensure they are using the default `desktop-linux` builder, which honors OS root certificate trust stores.
+   You can change the active builder back to `desktop-linux` by running `docker buildx use desktop-linux`.
 
 For more help, see [SUPPORT.md](../SUPPORT.md).
 

.devcontainer/devcontainer.json

@@ -19,11 +19,6 @@
       "target": "/workspace/node_modules"
     }
   ],
-  "containerEnv": {
-    "REQUESTS_CA_BUNDLE": "/etc/ssl/certs/ca-certificates.crt", // for pip
-    "NODE_EXTRA_CA_CERTS": "/etc/ssl/certs/ca-certificates.crt", // for nodejs
-    "SSL_CERT_FILE": "/etc/ssl/certs/ca-certificates.crt" // for uv (else use --native-tls flag)
-  },
   "features": {
     "ghcr.io/devcontainers/features/node:1": {
       "version": "20"

.devcontainer/scripts/post-create.sh

@@ -13,7 +13,6 @@ main() {
 
 	fix_volume_ownerships
   npm_install
-  update_ca_certs
 }
 
 # Volume ownership is not set automatically due to a bug:
@@ -44,15 +43,4 @@ npm_install() {
   echo "NPM dependencies installed successfully"
 }
 
-update_ca_certs() {
-  # Adds a root CA to the system certificate store. Useful if developer machines
-  # have MITM TLS inspection happening, e.g. with ZScaler.
-  echo "Updating container system CA certificates..."
-  if compgen -G ".devcontainer/*.crt" > /dev/null; then
-    sudo cp .devcontainer/*.crt /usr/local/share/ca-certificates/
-    sudo update-ca-certificates
-  fi
-  echo "Container's system CA certificates updated successfully"
-}
-
 main "$@"

.gitignore

@@ -469,4 +469,3 @@ docs/docusaurus/node_modules/
 # devcontainer
 /.gitconfig.global
 /.gitconfig.local
-/.devcontainer/*.crt