docker-library
/
tomcat
mirror of https://github.com/docker-library/tomcat.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Try keys.openpgp.org before falling back to keyserver.ubuntu.com

This commit is contained in:
Tianon Gravi 2024-12-13 16:25:50 -08:00
parent 87618e7220
commit c7f11de4a2
21 changed files with 105 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
10.1/jdk11/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
10.1/jdk11/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
10.1/jdk17/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
10.1/jdk17/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
10.1/jdk21/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
10.1/jdk21/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
11.0/jdk21/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
11.0/jdk21/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk11/corretto-al2/Dockerfile generated
View File

@ -73,7 +73,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk11/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk11/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk17/corretto-al2/Dockerfile generated
View File

@ -73,7 +73,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk17/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk17/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk21/corretto-al2/Dockerfile generated
View File

@ -73,7 +73,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk21/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk21/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk8/corretto-al2/Dockerfile generated
View File

@ -73,7 +73,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk8/temurin-jammy/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
9.0/jdk8/temurin-noble/Dockerfile generated
View File

@ -60,7 +60,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \

6
Dockerfile.template
View File

@ -115,7 +115,11 @@ RUN set -eux; \
ddist 'tomcat.tar.gz.asc' "tomcat/tomcat-$TOMCAT_MAJOR/v$TOMCAT_VERSION/bin/apache-tomcat-$TOMCAT_VERSION.tar.gz.asc" "$TOMCAT_VERSION/tomcat-$TOMCAT_VERSION.tar.gz.asc"; \
export GNUPGHOME="$(mktemp -d)"; \
for key in $GPG_KEYS; do \
gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
# try keys.openpgp.org first, as it is the superior keyserver
gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" \
# GnuPG returns a zero exit code for the above command if it receives key data but without a UID, but with the note that it's skipping the key it was asked to fetch, so the only way we can know if the above command *actually* succeeded is to check! 🙃
&& gpg --batch --fingerprint "$key" \
|| gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key"; \
done; \
gpg --batch --verify tomcat.tar.gz.asc tomcat.tar.gz; \
tar -xf tomcat.tar.gz --strip-components=1; \