diff --git a/tor-browser/stable/Dockerfile b/tor-browser/stable/Dockerfile index 03d7a48..52849f2 100644 --- a/tor-browser/stable/Dockerfile +++ b/tor-browser/stable/Dockerfile @@ -41,12 +41,20 @@ RUN cd /tmp \ && curl -sSOL "https://www.torproject.org/dist/torbrowser/${TOR_VERSION}/tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz" \ && curl -sSOL "https://www.torproject.org/dist/torbrowser/${TOR_VERSION}/tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz.asc" \ && mkdir ~/.gnupg \ - && gpg --no-tty --keyserver "pool.sks-keyservers.net" --recv-keys ${TOR_FINGERPRINT} \ + && for server in $(shuf -e \ + ha.pool.sks-keyservers.net \ + hkp://p80.pool.sks-keyservers.net:80 \ + keyserver.ubuntu.com \ + hkp://keyserver.ubuntu.com:80 \ + pgp.mit.edu) ; do \ + gpg --no-tty --keyserver "pool.sks-keyservers.net" --recv-keys ${TOR_FINGERPRINT} && break || : ; \ + done \ && gpg --fingerprint --keyid-format LONG ${TOR_FINGERPRINT} | grep "Key fingerprint = EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290" \ && gpg --verify tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz.asc \ && tar -vxJ --strip-components 1 -C /usr/local/bin -f tor-browser-linux64-${TOR_VERSION}_en-US.tar.xz \ && rm -rf tor-browser* \ - && rm -rf ~/.gnupg + && rm -rf ~/.gnupg \ + && chown -R user:user /usr/local/bin # good fonts