$ git clone -n https://gitee.com/src-anolis-os/ca-certificates.git /var/lib/mock/dist-an8.10-build-588987-98661/root/chroot_tmpdir/scmroot/ca-certificates
Cloning into '/var/lib/mock/dist-an8.10-build-588987-98661/root/chroot_tmpdir/scmroot/ca-certificates'...
$ git reset --hard origin/a8
HEAD is now at 52b78ec invalidate two certs 'emSign Root TLS CA - G3' and 'Comodo AAA Services root'