-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix suggested "gpg" usage to stop relying on deprecated and insecure behavior #1420
Conversation
(Wanna fix it properly here at the source before replicating outwards.) |
@@ -122,7 +122,7 @@ RUN set -x \ | |||
&& curl -fSL "https://github.com/krallin/tini/releases/download/$TINI_VERSION/tini.asc" -o /usr/local/bin/tini.asc \ | |||
&& export GNUPGHOME="$(mktemp -d)" \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If this GNUPGHOME
export is a best practice, it seems like it should be in the python.tar.xz.asc
example below as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeah, that's a good point -- I was going to update that separately, but might as well include it here too.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated. 😄
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM |
Fix suggested "gpg" usage to stop relying on deprecated and insecure behavior
I just realized we probably ought to link to the source of where this is pointed out to be "insecure"... 😇 From
|
Unless otherwise specified, these are just updates due to docker-library#1420 (reference). - `drupal`: use PHP 7 for 8+ (docker-library/drupal#35) - `ghost`: copy all themes explicitly (docker-library/ghost#31) - `java`: 9~b107-1 - `rails`: 4.2.5.2 - `rocket.chat`: 0.20.0 - `ruby`: remove 2.0 (EOL; docker-library/ruby#71)
Unless otherwise specified, these are just updates due to docker-library#1420 (reference). - `drupal`: use PHP 7 for 8+ (docker-library/drupal#35) - `ghost`: copy all themes explicitly (docker-library/ghost#31) - `java`: 9~b107-1 - `rails`: 4.2.5.2 - `rocket.chat`: 0.20.0 - `ruby`: remove 2.0 (EOL; docker-library/ruby#71) - `django`: 1.9.3 - `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83) - `redmine`: passenger 5.0.26
Unless otherwise specified, these are just updates due to docker-library#1420 (reference). - `drupal`: use PHP 7 for 8+ (docker-library/drupal#35) - `ghost`: copy all themes explicitly (docker-library/ghost#31) - `java`: 9~b107-1 - `rails`: 4.2.5.2 - `rocket.chat`: 0.20.0 - `ruby`: remove 2.0 (EOL; docker-library/ruby#71) - `django`: 1.9.3 - `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83) - `rabbitmq`: 3.6.1 - `redmine`: passenger 5.0.26
Unless otherwise specified, these are just updates due to docker-library#1420 (reference). - `drupal`: use PHP 7 for 8+ (docker-library/drupal#35) - `ghost`: copy all themes explicitly (docker-library/ghost#31) - `rails`: 4.2.5.2 - `rocket.chat`: 0.20.0 - `ruby`: remove 2.0 (EOL; docker-library/ruby#71) - `django`: 1.9.3 - `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83) - `rabbitmq`: 3.6.1 - `redmine`: passenger 5.0.26
1. update GPG usage ala docker-library/official-images#1420 2. simplify "GeoIP" download and ensure download failure will be obvious (eases debugging) 3. move the `VOLUME` definition down to avoid creating additional volumes during build (adding a comment for additional clarity) 4. adjust the entrypoint to consistently assume `/var/www/html` is the current directory (instead of only assuming so for the `tar` line)
Unless otherwise specified, these are just updates due to docker-library#1420 (reference). - `drupal`: use PHP 7 for 8+ (docker-library/drupal#35) - `ghost`: copy all themes explicitly (docker-library/ghost#31) - `rails`: 4.2.5.2 - `rocket.chat`: 0.20.0 - `ruby`: remove 2.0 (EOL; docker-library/ruby#71) - `django`: 1.9.3 - `elasticsearch`: add `WORKDIR` (docker-library/elasticsearch#83) - `rabbitmq`: 3.6.1 - `redmine`: passenger 5.0.26
cc @aburch -- does this look at least more correct? 😇 (anything we could do to make this pattern even better?)