From 122e6ecfd3ec31084a4d25c1412b3d615c617148 Mon Sep 17 00:00:00 2001 From: "Roger A. Light" Date: Thu, 3 Dec 2020 21:07:01 +0000 Subject: [PATCH] Docker: Verify sha256 sums for lws/cjson. --- docker/1.5/Dockerfile | 4 +++- docker/1.6-openssl/Dockerfile | 4 +++- docker/1.6/Dockerfile | 4 +++- docker/2.0-openssl/Dockerfile | 6 +++++- docker/2.0/Dockerfile | 6 +++++- 5 files changed, 19 insertions(+), 5 deletions(-) diff --git a/docker/1.5/Dockerfile b/docker/1.5/Dockerfile index 801dcbcc..742bbaab 100644 --- a/docker/1.5/Dockerfile +++ b/docker/1.5/Dockerfile @@ -6,7 +6,8 @@ LABEL maintainer="Roger Light " \ ENV VERSION=1.5.10 \ DOWNLOAD_SHA256=00d9688dffef0e2c26f3fb1486931ed5d89042d81f6d4c1dd455d63080149c20 \ GPG_KEYS=A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7 \ - LWS_VERSION=2.4.2 + LWS_VERSION=2.4.2 \ + LWS_SHA256=73012d7fcf428dedccc816e83a63a01462e27819d5537b8e0d0c7264bfacfad6 RUN set -x && \ apk --no-cache add --virtual build-deps \ @@ -16,6 +17,7 @@ RUN set -x && \ libressl-dev \ util-linux-dev && \ wget https://github.com/warmcat/libwebsockets/archive/v${LWS_VERSION}.tar.gz -O /tmp/lws.tar.gz && \ + echo "$LWS_SHA256 /tmp/lws.tar.gz" | sha256sum -c - && \ mkdir -p /build/lws && \ tar --strip=1 -xf /tmp/lws.tar.gz -C /build/lws && \ rm /tmp/lws.tar.gz && \ diff --git a/docker/1.6-openssl/Dockerfile b/docker/1.6-openssl/Dockerfile index a7859112..46e0bc83 100644 --- a/docker/1.6-openssl/Dockerfile +++ b/docker/1.6-openssl/Dockerfile @@ -6,7 +6,8 @@ LABEL maintainer="Roger Light " \ ENV VERSION=1.6.12 \ DOWNLOAD_SHA256=548d73d19fb787dd0530334e398fd256ef3a581181678488a741a995c4f007fb \ GPG_KEYS=A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7 \ - LWS_VERSION=2.4.2 + LWS_VERSION=2.4.2 \ + LWS_SHA256=73012d7fcf428dedccc816e83a63a01462e27819d5537b8e0d0c7264bfacfad6 RUN set -x && \ apk --no-cache add --virtual build-deps \ @@ -16,6 +17,7 @@ RUN set -x && \ openssl-dev \ util-linux-dev && \ wget https://github.com/warmcat/libwebsockets/archive/v${LWS_VERSION}.tar.gz -O /tmp/lws.tar.gz && \ + echo "$LWS_SHA256 /tmp/lws.tar.gz" | sha256sum -c - && \ mkdir -p /build/lws && \ tar --strip=1 -xf /tmp/lws.tar.gz -C /build/lws && \ rm /tmp/lws.tar.gz && \ diff --git a/docker/1.6/Dockerfile b/docker/1.6/Dockerfile index 500203ee..63083ec2 100644 --- a/docker/1.6/Dockerfile +++ b/docker/1.6/Dockerfile @@ -6,7 +6,8 @@ LABEL maintainer="Roger Light " \ ENV VERSION=1.6.12 \ DOWNLOAD_SHA256=548d73d19fb787dd0530334e398fd256ef3a581181678488a741a995c4f007fb \ GPG_KEYS=A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7 \ - LWS_VERSION=2.4.2 + LWS_VERSION=2.4.2 \ + LWS_SHA256=73012d7fcf428dedccc816e83a63a01462e27819d5537b8e0d0c7264bfacfad6 RUN set -x && \ apk --no-cache add --virtual build-deps \ @@ -16,6 +17,7 @@ RUN set -x && \ libressl-dev \ util-linux-dev && \ wget https://github.com/warmcat/libwebsockets/archive/v${LWS_VERSION}.tar.gz -O /tmp/lws.tar.gz && \ + echo "$LWS_SHA256 /tmp/lws.tar.gz" | sha256sum -c - && \ mkdir -p /build/lws && \ tar --strip=1 -xf /tmp/lws.tar.gz -C /build/lws && \ rm /tmp/lws.tar.gz && \ diff --git a/docker/2.0-openssl/Dockerfile b/docker/2.0-openssl/Dockerfile index dad8de4b..c818ad3c 100644 --- a/docker/2.0-openssl/Dockerfile +++ b/docker/2.0-openssl/Dockerfile @@ -7,7 +7,9 @@ ENV VERSION=2.0.0 \ DOWNLOAD_SHA256=ca8c21d1b04037df27639de9ea8f82fa73e1cbd24e83e6394ed67b537c4b6d86 \ GPG_KEYS=A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7 \ LWS_VERSION=2.4.2 \ - CJSON_VERSION=1.7.14 + LWS_SHA256=73012d7fcf428dedccc816e83a63a01462e27819d5537b8e0d0c7264bfacfad6 \ + CJSON_VERSION=1.7.14 \ + CJSON_SHA256=fb50a663eefdc76bafa80c82bc045af13b1363e8f45cec8b442007aef6a41343 RUN set -x && \ apk --no-cache add --virtual build-deps \ @@ -17,6 +19,7 @@ RUN set -x && \ openssl-dev \ util-linux-dev && \ wget https://github.com/warmcat/libwebsockets/archive/v${LWS_VERSION}.tar.gz -O /tmp/lws.tar.gz && \ + echo "$LWS_SHA256 /tmp/lws.tar.gz" | sha256sum -c - && \ mkdir -p /build/lws && \ tar --strip=1 -xf /tmp/lws.tar.gz -C /build/lws && \ rm /tmp/lws.tar.gz && \ @@ -35,6 +38,7 @@ RUN set -x && \ make -j "$(nproc)" && \ rm -rf /root/.cmake && \ wget https://github.com/DaveGamble/cJSON/archive/v${CJSON_VERSION}.tar.gz -O /tmp/cjson.tar.gz && \ + echo "$CJSON_SHA256 /tmp/cjson.tar.gz" | sha256sum -c - && \ mkdir -p /build/cjson && \ tar --strip=1 -xf /tmp/cjson.tar.gz -C /build/cjson && \ rm /tmp/cjson.tar.gz && \ diff --git a/docker/2.0/Dockerfile b/docker/2.0/Dockerfile index 44b4c252..1a23e85b 100644 --- a/docker/2.0/Dockerfile +++ b/docker/2.0/Dockerfile @@ -7,7 +7,9 @@ ENV VERSION=2.0.0 \ DOWNLOAD_SHA256=ca8c21d1b04037df27639de9ea8f82fa73e1cbd24e83e6394ed67b537c4b6d86 \ GPG_KEYS=A0D6EEA1DCAE49A635A3B2F0779B22DFB3E717B7 \ LWS_VERSION=2.4.2 \ - CJSON_VERSION=1.7.14 + LWS_SHA256=73012d7fcf428dedccc816e83a63a01462e27819d5537b8e0d0c7264bfacfad6 \ + CJSON_VERSION=1.7.14 \ + CJSON_SHA256=fb50a663eefdc76bafa80c82bc045af13b1363e8f45cec8b442007aef6a41343 RUN set -x && \ apk --no-cache add --virtual build-deps \ @@ -17,6 +19,7 @@ RUN set -x && \ libressl-dev \ util-linux-dev && \ wget https://github.com/warmcat/libwebsockets/archive/v${LWS_VERSION}.tar.gz -O /tmp/lws.tar.gz && \ + echo "$LWS_SHA256 /tmp/lws.tar.gz" | sha256sum -c - && \ mkdir -p /build/lws && \ tar --strip=1 -xf /tmp/lws.tar.gz -C /build/lws && \ rm /tmp/lws.tar.gz && \ @@ -35,6 +38,7 @@ RUN set -x && \ make -j "$(nproc)" && \ rm -rf /root/.cmake && \ wget https://github.com/DaveGamble/cJSON/archive/v${CJSON_VERSION}.tar.gz -O /tmp/cjson.tar.gz && \ + echo "$CJSON_SHA256 /tmp/cjson.tar.gz" | sha256sum -c - && \ mkdir -p /build/cjson && \ tar --strip=1 -xf /tmp/cjson.tar.gz -C /build/cjson && \ rm /tmp/cjson.tar.gz && \