Update gosu to 1.10

This commit is contained in:
Tianon Gravi 2017-11-13 15:55:56 -08:00
parent f50d0a8218
commit 1037a0b7ab
6 changed files with 156 additions and 72 deletions

View File

@ -5,18 +5,32 @@ FROM debian:jessie
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

View File

@ -5,18 +5,32 @@ FROM debian:jessie
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

View File

@ -5,18 +5,32 @@ FROM debian:jessie
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

View File

@ -5,18 +5,32 @@ FROM debian:jessie
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

View File

@ -5,18 +5,32 @@ FROM debian:wheezy
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d

View File

@ -5,18 +5,32 @@ FROM debian:%%SUITE%%
RUN groupadd -r mysql && useradd -r -g mysql mysql RUN groupadd -r mysql && useradd -r -g mysql mysql
# add gosu for easy step-down from root # add gosu for easy step-down from root
ENV GOSU_VERSION 1.7 ENV GOSU_VERSION 1.10
RUN set -x \ RUN set -ex; \
&& apt-get update && apt-get install -y --no-install-recommends ca-certificates wget && rm -rf /var/lib/apt/lists/* \ \
&& wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture)" \ fetchDeps=' \
&& wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$(dpkg --print-architecture).asc" \ ca-certificates \
&& export GNUPGHOME="$(mktemp -d)" \ wget \
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \ '; \
&& gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu \ apt-get update; \
&& rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc \ apt-get install -y --no-install-recommends $fetchDeps; \
&& chmod +x /usr/local/bin/gosu \ rm -rf /var/lib/apt/lists/*; \
&& gosu nobody true \ \
&& apt-get purge -y --auto-remove ca-certificates wget dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
wget -O /usr/local/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
wget -O /usr/local/bin/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
\
# verify the signature
export GNUPGHOME="$(mktemp -d)"; \
gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
gpg --batch --verify /usr/local/bin/gosu.asc /usr/local/bin/gosu; \
rm -r "$GNUPGHOME" /usr/local/bin/gosu.asc; \
\
chmod +x /usr/local/bin/gosu; \
# verify that the binary works
gosu nobody true; \
\
apt-get purge -y --auto-remove $fetchDeps
RUN mkdir /docker-entrypoint-initdb.d RUN mkdir /docker-entrypoint-initdb.d