fix: #121

[jjmaestro]

In #121 I introduced new aliases and when using one of them (:data) in cacerts, we are hitting the new selects that only have Linux branches and no default case, so it breaks in non-linux OSes.

The cacerts rule needs to be restricted to only compatible OSes.

[jjmaestro]

@thesayyn I just noticed the error when I rebased and was trying to repro / check #139 running the tests in OSX. I thought CI was running checks for MacOS too, is that not the case? :-?

[jjmaestro]

If I'm reading this correctly, the CI is only excluding Windows:

rules_distroless/.github/workflows/ci.yaml

Lines 27 to 31 in 2354eb3

	exclude: |
	[
	{"folder": ".", "bzlmodEnabled": false},
	{"os": "windows-latest"},
	]

But looking at the last CI run in #121 it seems like the matrix step only picked Ubuntu and skipped Mac and Windows... maybe it's because the runner only scheduled it in a linux server? :-?

Dunno, GH Actions are a bit hard to debug... in any case, this fixes the issue with the tests, but it would be good to find out if the CI is running everywhere it should!

[jjmaestro]

I see the CI ran on MacOS but only after the merge! Is that how it's configured? :-?

[thesayyn]

I see the CI ran on MacOS but only after the merge! Is that how it's configured? :-?

it only runs on main, and branch names that contain mac since mac runners are expensive.

[jjmaestro]

I see the CI ran on MacOS but only after the merge! Is that how it's configured? :-?

it only runs on main, and branch names that contain mac since mac runners are expensive.

Ah, I see. I seem to remember this same discussion before. I think the holidays erased a bunch of context from my head... 😅

Anyway, if you have a Mac and if you want, give it a check just to confirm that it's OK and passing everything! And/or let me know if there's any chage you want in this PR.