[pas]

You can copy the CA bundle in the last step of the image build (along with the required libs and their assets/dependencies), or am I missing something?