Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix suggested "gpg" usage to stop relying on deprecated and insecure behavior #1420

Merged
merged 1 commit into from
Feb 8, 2016

Conversation

tianon
Copy link
Member

@tianon tianon commented Feb 6, 2016

cc @aburch -- does this look at least more correct? 😇 (anything we could do to make this pattern even better?)

@tianon
Copy link
Member Author

tianon commented Feb 6, 2016

(Wanna fix it properly here at the source before replicating outwards.)

@@ -122,7 +122,7 @@ RUN set -x \
&& curl -fSL "https://github.com/krallin/tini/releases/download/$TINI_VERSION/tini.asc" -o /usr/local/bin/tini.asc \
&& export GNUPGHOME="$(mktemp -d)" \
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If this GNUPGHOME export is a best practice, it seems like it should be in the python.tar.xz.asc example below as well.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, that's a good point -- I was going to update that separately, but might as well include it here too.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated. 😄

Copy link
Contributor

@md5 md5 Feb 6, 2016 via email

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@yosifkit
Copy link
Member

yosifkit commented Feb 8, 2016

LGTM

tianon added a commit that referenced this pull request Feb 8, 2016
Fix suggested "gpg" usage to stop relying on deprecated and insecure behavior
@tianon tianon merged commit a3ae9f9 into docker-library:master Feb 8, 2016
@tianon tianon deleted the fix-gpg branch February 8, 2016 20:51
@tianon
Copy link
Member Author

tianon commented Feb 27, 2016

I just realized we probably ought to link to the source of where this is pointed out to be "insecure"... 😇

From gpg(1) (http://manpages.debian.org/cgi-bin/man.cgi?query=gpg&manpath=Debian+unstable+sid):

   --verify

...

          Note: If the option --batch is not used, gpg may assume  that  a
          single  argument is a file with a detached signature and it will
          try to find a matching data file by stripping certain  suffixes.
          Using  this historical feature to verify a detached signature is
          strongly discouraged; always specify the data file too.

This was referenced Feb 27, 2016
tianon added a commit to infosiftr/stackbrew that referenced this pull request Mar 1, 2016
Unless otherwise specified, these are just updates due to docker-library#1420 (reference).

- `drupal`: use PHP 7 for 8+ (docker-library/drupal#35)
- `ghost`: copy all themes explicitly (docker-library/ghost#31)
- `java`: 9~b107-1
- `rails`: 4.2.5.2
- `rocket.chat`: 0.20.0
- `ruby`: remove 2.0 (EOL; docker-library/ruby#71)
tianon added a commit to infosiftr/stackbrew that referenced this pull request Mar 2, 2016
Unless otherwise specified, these are just updates due to docker-library#1420 (reference).

- `drupal`: use PHP 7 for 8+ (docker-library/drupal#35)
- `ghost`: copy all themes explicitly (docker-library/ghost#31)
- `java`: 9~b107-1
- `rails`: 4.2.5.2
- `rocket.chat`: 0.20.0
- `ruby`: remove 2.0 (EOL; docker-library/ruby#71)

- `django`: 1.9.3
- `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83)
- `redmine`: passenger 5.0.26
tianon added a commit to infosiftr/stackbrew that referenced this pull request Mar 2, 2016
Unless otherwise specified, these are just updates due to docker-library#1420 (reference).

- `drupal`: use PHP 7 for 8+ (docker-library/drupal#35)
- `ghost`: copy all themes explicitly (docker-library/ghost#31)
- `java`: 9~b107-1
- `rails`: 4.2.5.2
- `rocket.chat`: 0.20.0
- `ruby`: remove 2.0 (EOL; docker-library/ruby#71)

- `django`: 1.9.3
- `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83)
- `rabbitmq`: 3.6.1
- `redmine`: passenger 5.0.26
tianon added a commit to infosiftr/stackbrew that referenced this pull request Mar 2, 2016
Unless otherwise specified, these are just updates due to docker-library#1420 (reference).

- `drupal`: use PHP 7 for 8+ (docker-library/drupal#35)
- `ghost`: copy all themes explicitly (docker-library/ghost#31)
- `rails`: 4.2.5.2
- `rocket.chat`: 0.20.0
- `ruby`: remove 2.0 (EOL; docker-library/ruby#71)

- `django`: 1.9.3
- `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83)
- `rabbitmq`: 3.6.1
- `redmine`: passenger 5.0.26
tianon added a commit to tianon/docker-piwik that referenced this pull request Mar 4, 2016
1. update GPG usage ala docker-library/official-images#1420
2. simplify "GeoIP" download and ensure download failure will be obvious (eases debugging)
3. move the `VOLUME` definition down to avoid creating additional volumes during build (adding a comment for additional clarity)
4. adjust the entrypoint to consistently assume `/var/www/html` is the current directory (instead of only assuming so for the `tar` line)
@tianon tianon mentioned this pull request Apr 26, 2016
makuk66 added a commit to docker-solr/docker-solr that referenced this pull request Apr 27, 2016
RichardScothern pushed a commit to RichardScothern/official-images that referenced this pull request Jun 14, 2016
Unless otherwise specified, these are just updates due to docker-library#1420 (reference).

- `drupal`: use PHP 7 for 8+ (docker-library/drupal#35)
- `ghost`: copy all themes explicitly (docker-library/ghost#31)
- `rails`: 4.2.5.2
- `rocket.chat`: 0.20.0
- `ruby`: remove 2.0 (EOL; docker-library/ruby#71)

- `django`: 1.9.3
- `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83)
- `rabbitmq`: 3.6.1
- `redmine`: passenger 5.0.26
This was referenced Jul 19, 2016
@tianon tianon mentioned this pull request Jan 12, 2017
17 tasks
@tianon tianon mentioned this pull request Jan 30, 2017
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants