xZero707/dockerfiles
1
0
Fork 0
mirror of https://github.com/jessfraz/dockerfiles.git synced 2024-11-23 11:31:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

Follow Dockerfile best practice by verifying file download against GPG signature. (#485)

Browse Source
This commit is contained in:
Michael Lescisin 2019-09-16 14:36:11 -04:00 committed by Jess Frazelle
parent 7ed006e246
commit f2889f0383
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
curl/Dockerfile
View File

@ -22,7 +22,11 @@ RUN set -x \
nghttp2-dev \
openssl-dev \
perl \
gnupg \
&& wget https://curl.haxx.se/download/curl-$CURL_VERSION.tar.bz2 \
&& wget https://curl.haxx.se/download/curl-$CURL_VERSION.tar.bz2.asc \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys 27EDEAF22F3ABCEB50DB9A125CC908FDB71E12C2 \
&& gpg --verify curl-$CURL_VERSION.tar.bz2.asc \
&& tar xjvf curl-$CURL_VERSION.tar.bz2 \
&& rm curl-$CURL_VERSION.tar.bz2 \
&& ( \