xZero707/dockerfiles
1
0
Fork 0
mirror of https://github.com/jessfraz/dockerfiles.git synced 2025-04-13 15:42:46 +02:00
Code Issues Packages Projects Releases Wiki Activity

Follow Dockerfile best practice by verifying file download against GPG signature. ()

Browse Source
This commit is contained in:
Michael Lescisin 2019-09-16 14:36:11 -04:00 committed by Jess Frazelle
parent 7ed006e246
commit f2889f0383
1 changed files with 4 additions and 0 deletions

4
curl/Dockerfile

@ -22,7 +22,11 @@ RUN set -x \
nghttp2-dev \ nghttp2-dev \
openssl-dev \ openssl-dev \
perl \ perl \
gnupg \
&& wget https://curl.haxx.se/download/curl-$CURL_VERSION.tar.bz2 \ && wget https://curl.haxx.se/download/curl-$CURL_VERSION.tar.bz2 \
&& wget https://curl.haxx.se/download/curl-$CURL_VERSION.tar.bz2.asc \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 \
&& gpg --verify curl-$CURL_VERSION.tar.bz2.asc \
&& tar xjvf curl-$CURL_VERSION.tar.bz2 \ && tar xjvf curl-$CURL_VERSION.tar.bz2 \
&& rm curl-$CURL_VERSION.tar.bz2 \ && rm curl-$CURL_VERSION.tar.bz2 \
&& ( \ && ( \