docker-library
/
bashbrew
mirror of https://github.com/docker-library/bashbrew.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update to manifest-tool 0.5.0 and verify signatures

This commit is contained in:
Tianon Gravi 2017-06-08 14:35:04 -07:00
parent 1066e05a1f
commit 9c538e056d
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
Dockerfile.release
View File

@ -2,6 +2,7 @@ FROM golang:1.8-alpine
RUN apk add --no-cache \ RUN apk add --no-cache \
file \ file \
gnupg \
libressl libressl
WORKDIR /usr/src/bashbrew WORKDIR /usr/src/bashbrew
@ -9,11 +10,17 @@ ENV GOPATH /usr/src/bashbrew:/usr/src/bashbrew/vendor
ENV CGO_ENABLED 0 ENV CGO_ENABLED 0
# https://github.com/estesp/manifest-tool/releases # https://github.com/estesp/manifest-tool/releases
ENV MANIFEST_TOOL_VERSION 0.4.0 ENV MANIFEST_TOOL_VERSION 0.5.0
# gpg: key 0F386284C03A1162: public key "Philip Estes <estesp@gmail.com>" imported
ENV MANIFEST_TOOL_GPG_KEY 27F3EA268A97867EAF0BD05C0F386284C03A1162
COPY go . COPY go .
RUN set -ex; \ RUN set -ex; \
\
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$MANIFEST_TOOL_GPG_KEY"; \
\
mkdir bin; \ mkdir bin; \
for osArch in \ for osArch in \
amd64 \ amd64 \
@ -56,8 +63,12 @@ RUN set -ex; \
# ... and estesp is probably a big fat "lololol" on supporting i386 :D # ... and estesp is probably a big fat "lololol" on supporting i386 :D
arm|386) continue ;; \ arm|386) continue ;; \
esac; \ esac; \
# TODO verify GPG signatures for manifest-tool releases
wget -O "bin/manifest-tool-$osArch$ext" "https://github.com/estesp/manifest-tool/releases/download/v${MANIFEST_TOOL_VERSION}/manifest-tool-$GOOS-$GOARCH$ext"; \ wget -O "bin/manifest-tool-$osArch$ext" "https://github.com/estesp/manifest-tool/releases/download/v${MANIFEST_TOOL_VERSION}/manifest-tool-$GOOS-$GOARCH$ext"; \
wget -O "bin/manifest-tool-$osArch$ext.asc" "https://github.com/estesp/manifest-tool/releases/download/v${MANIFEST_TOOL_VERSION}/manifest-tool-$GOOS-$GOARCH$ext.asc"; \
gpg --batch --verify "bin/manifest-tool-$osArch$ext.asc" "bin/manifest-tool-$osArch$ext"; \
done; \ done; \
\
rm -rf "$GNUPGHOME"; \
\
ls -l bin; \ ls -l bin; \
file bin/* file bin/*