While upgrading from 17.11.1 to 18.0.2, I've noticed that we now need to configure [the custom lxd executor](https://docs.gitlab.com/runner/executors/custom_examples/lxd.html) to import the gitlab ca certificate, otherwise the initial `git clone` fails with the unknown certificate error. Is that expected? In my case, since I'm using Ubuntu based container, I had to upload the ca certificate with: ```bash lxc file push \ /vagrant/tmp/gitlab-ca-crt.pem \ "$image_name/usr/local/share/ca-certificates/gitlab-ca.crt" ``` Then later, add that to the system certificates with the `update-ca-certificates` command.