Symptom
Docker build steps that access external repositories fail with TLS or certificate verification errors.
Cause
The build‑time container does not trust the enterprise proxy root CA. Although the host and Docker daemon may be correctly configured, container images do not inherit host trust settings by default.
Resolution
Ensure the proxy root CA is made available during the initial build stage.
Update the container’s certificate trust store before running package installation commands.
Verify that all network‑accessing commands occur after the trust update step.