@rain basically always yes (unless they don't use any certificates at all). if one is unlucky (due to proliferation in different ProgLang ecosystems to do their own certificate distribution by default), even in multiple, completely unrelated places.
@rain You could patch in the update. like, the certificates are only a single folder (and most programs only use a single file, computed by merging the entire folder).
@rain sometimes*, I know I had to install certificates into raw nix based docker containers (buildDockerImage) before (that's basically the only way I use docker) so I assume other docker distros also have to handle this some way