use Ned Deily's gpg key
This commit is contained in:
parent
635ea5d58b
commit
d92b2e0035
|
@ -7,6 +7,9 @@ RUN apt-get purge -y python.*
|
||||||
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
||||||
ENV LANG C.UTF-8
|
ENV LANG C.UTF-8
|
||||||
|
|
||||||
|
# gpg: key AA65421D: public key "Ned Deily (Python release signing key) <nad@acm.org>" imported
|
||||||
|
ENV GPG_KEY 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D
|
||||||
|
|
||||||
ENV PYTHON_VERSION 3.6.0a2
|
ENV PYTHON_VERSION 3.6.0a2
|
||||||
|
|
||||||
# if this is called "PIP_VERSION", pip explodes with "ValueError: invalid truth value '<VERSION>'"
|
# if this is called "PIP_VERSION", pip explodes with "ValueError: invalid truth value '<VERSION>'"
|
||||||
|
@ -16,7 +19,7 @@ RUN set -ex \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
||||||
&& export GNUPGHOME="$(mktemp -d)" \
|
&& export GNUPGHOME="$(mktemp -d)" \
|
||||||
&& curl -fSL https://www.python.org/static/files/pubkeys.txt | gpg --import \
|
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$GPG_KEY" \
|
||||||
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
||||||
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
||||||
&& mkdir -p /usr/src/python \
|
&& mkdir -p /usr/src/python \
|
||||||
|
|
|
@ -4,6 +4,9 @@ FROM alpine:3.4
|
||||||
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
||||||
ENV LANG C.UTF-8
|
ENV LANG C.UTF-8
|
||||||
|
|
||||||
|
# gpg: key AA65421D: public key "Ned Deily (Python release signing key) <nad@acm.org>" imported
|
||||||
|
ENV GPG_KEY 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D
|
||||||
|
|
||||||
ENV PYTHON_VERSION 3.6.0a2
|
ENV PYTHON_VERSION 3.6.0a2
|
||||||
|
|
||||||
# if this is called "PIP_VERSION", pip explodes with "ValueError: invalid truth value '<VERSION>'"
|
# if this is called "PIP_VERSION", pip explodes with "ValueError: invalid truth value '<VERSION>'"
|
||||||
|
@ -14,7 +17,7 @@ RUN set -ex \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
||||||
&& export GNUPGHOME="$(mktemp -d)" \
|
&& export GNUPGHOME="$(mktemp -d)" \
|
||||||
&& curl -fSL https://www.python.org/static/files/pubkeys.txt | gpg --import \
|
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$GPG_KEY" \
|
||||||
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
||||||
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
||||||
&& mkdir -p /usr/src \
|
&& mkdir -p /usr/src \
|
||||||
|
|
|
@ -7,6 +7,9 @@ RUN apt-get purge -y python.*
|
||||||
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
# > At the moment, setting "LANG=C" on a Linux system *fundamentally breaks Python 3*, and that's not OK.
|
||||||
ENV LANG C.UTF-8
|
ENV LANG C.UTF-8
|
||||||
|
|
||||||
|
# gpg: key AA65421D: public key "Ned Deily (Python release signing key) <nad@acm.org>" imported
|
||||||
|
ENV GPG_KEY 0D96DF4D4110E5C43FBFB17F2D347EA6AA65421D
|
||||||
|
|
||||||
RUN apt-get update && apt-get install -y --no-install-recommends \
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
||||||
ca-certificates \
|
ca-certificates \
|
||||||
libsqlite3-0 \
|
libsqlite3-0 \
|
||||||
|
@ -37,7 +40,7 @@ RUN set -ex \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz" -o python.tar.xz \
|
||||||
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
&& curl -fSL "https://www.python.org/ftp/python/${PYTHON_VERSION%%[a-z]*}/Python-$PYTHON_VERSION.tar.xz.asc" -o python.tar.xz.asc \
|
||||||
&& export GNUPGHOME="$(mktemp -d)" \
|
&& export GNUPGHOME="$(mktemp -d)" \
|
||||||
&& curl -fSL https://www.python.org/static/files/pubkeys.txt | gpg --import \
|
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$GPG_KEY" \
|
||||||
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
&& gpg --batch --verify python.tar.xz.asc python.tar.xz \
|
||||||
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
&& rm -r "$GNUPGHOME" python.tar.xz.asc \
|
||||||
&& mkdir -p /usr/src/python \
|
&& mkdir -p /usr/src/python \
|
||||||
|
|
Loading…
Reference in New Issue