Today we're adding the libsunec.so to the final image during the s2i process. Ideally, the runtime image should have this lib at /home/kogito/bin directory altogether with the cacert file (that we don't have it today).

This way, an user could have a simple Dockerfile like:

FROM quay.io/kiegroup/kogito-quarkus-ubi8:0.4.0
COPY target/*-runner /home/kogito/bin/*-runner

Would be an easy approach for tests/ci or any other scenarios where some user already has the binary ready, needs TLS support and don't have the time to run the s2i process again.

See: https://quarkus.io/guides/native-and-ssl