rm: remote build deprecation notice & add troubleshooting steps (#1084)

ericpaulsen · web-flow · commit 8c368eecb288 · 2022-08-17T18:24:36.000-05:00
* rm: remote build deprecation notice &amp; add troubleshooting steps

* chore: tweaks

* chore: feedback
diff --git a/admin/workspace-management/self-contained-builds.md b/admin/workspace-management/self-contained-builds.md
@@ -15,8 +15,6 @@ Beginning with v1.30.0, the default is **self-contained workspace builds**,
 though site managers can toggle this feature off and opt for remote builds
 instead.
 
-> Coder plans to deprecate remote workspace builds in the future.
-
 To toggle self-contained workspace builds:
 
 1. Log into Coder.
@@ -29,7 +27,31 @@ To toggle self-contained workspace builds:
 > Build errors are typically more verbose for remote builds than with
 > self-contained builds.
 
-## Known issues
+## Troubleshooting
+
+In certain cases, your workspace may not trust the `coderd` TLS certificate.
+This will result in the error below:
+
+```console
+stream logs from workspace: Failed to create Container-based Virtual Machine
+```
+
+To resolve this, you will need to copy the `coderd` TLS certificate into
+your Docker image's certificate trust store. Below are examples for doing so,
+for the major distributions:
+
+### Debian and Ubuntu distributions
+
+```Dockerfile
+RUN apt-get install -y ca-certificates
+COPY my-cert.pem /usr/local/share/ca-certificates/my-cert.pem
+RUN update-ca-certificates
+```
+
+### CentOS, Fedora, RedHat distributions
 
-At this time, Coder does not support certificate injection with self-contained
-workspace builds.
+```Dockerfile
+RUN yum install ca-certificates && update-ca-trust force-enable
+COPY my-cert.pem /etc/pki/ca-trust/source/anchors/
+RUN update-ca-trust extract
+```
