Prevent removal of the ca-certificates, so that there is no

warnings while building based on this image.

docker/install_depends.sh

@@ -16,6 +16,7 @@ then
   echo "deb [signed-by=/usr/share/keyrings/llvm.gpg] http://apt.llvm.org/bookworm/ llvm-toolchain-bookworm-${CLANG_VER} main" > /etc/apt/sources.list.d/llvm.list
   curl https://apt.llvm.org/llvm-snapshot.gpg.key | gpg --dearmor > /usr/share/keyrings/llvm.gpg
   apt-get -y update -qq
+  apt-mark hold ca-certificates
 fi
 
 ${APT_INSTALL} ${LIB_DEPS} ${BUILD_DEPS}