mirror of
https://git.openwrt.org/feed/packages.git
synced 2024-06-14 19:33:59 +02:00
acd48ceeb7
It appears snapshot target builds have switched from GPG signatures (sha256sums.asc) to usign signatures (sha256sums.sig). This adds support for verifying these usign signatures. (GPG signatures will also be verified if found.) This also restores the alphabetical ordering of packages to be installed by apt-get. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
49 lines
1.4 KiB
Docker
49 lines
1.4 KiB
Docker
FROM debian:9
|
|
|
|
|
|
# Configuration version history
|
|
# v1.0 - Initial version by Etienne Champetier
|
|
# v1.0.1 - Run as non-root, add unzip, xz-utils
|
|
# v1.0.2 - Add bzr
|
|
# v1.0.3 - Verify usign signatures
|
|
|
|
RUN apt update && apt install -y \
|
|
build-essential \
|
|
bzr \
|
|
curl \
|
|
jq \
|
|
gawk \
|
|
gettext \
|
|
git \
|
|
libncurses5-dev \
|
|
libssl-dev \
|
|
python \
|
|
signify-openbsd \
|
|
subversion \
|
|
time \
|
|
unzip \
|
|
wget \
|
|
xz-utils \
|
|
zlib1g-dev \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
RUN useradd -c "OpenWrt Builder" -m -d /home/build -s /bin/bash build
|
|
USER build
|
|
ENV HOME /home/build
|
|
|
|
# LEDE Build System (LEDE GnuPG key for unattended build jobs)
|
|
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/626471F1.asc' | gpg --import \
|
|
&& echo '54CC74307A2C6DC9CE618269CD84BCED626471F1:6:' | gpg --import-ownertrust
|
|
|
|
# LEDE Release Builder (17.01 "Reboot" Signing Key)
|
|
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/D52BBB6B.asc' | gpg --import \
|
|
&& echo 'B09BE781AE8A0CD4702FDCD3833C6010D52BBB6B:6:' | gpg --import-ownertrust
|
|
|
|
# OpenWrt Release Builder (18.06 Signing Key)
|
|
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=gpg/17E1CE16.asc' | gpg --import \
|
|
&& echo '6768C55E79B032D77A28DA5F0F20257417E1CE16:6:' | gpg --import-ownertrust
|
|
|
|
# LEDE Build System (LEDE usign key for unattended build jobs)
|
|
RUN curl 'https://git.openwrt.org/?p=keyring.git;a=blob_plain;f=usign/b5043e70f9a75cde' --create-dirs \
|
|
-o /home/build/usign/b5043e70f9a75cde
|