This is an automated email from the ASF dual-hosted git repository.
japetrsn pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/incubator-openwhisk-package-alarms.git
The following commit(s) were added to refs/heads/master by this push:
new aeafa57 added checksum verification for
https://deb.nodesource.com/setup_8.x (#164)
aeafa57 is described below
commit aeafa57e0939db2134959b28b05a6275bb21ce10
Author: moritzraho <[email protected]>
AuthorDate: Fri Oct 19 19:34:03 2018 +0200
added checksum verification for https://deb.nodesource.com/setup_8.x (#164)
* added checksum verification for https://deb.nodesource.com/setup_8.x
* two spaces for sha256sum
---
Dockerfile | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/Dockerfile b/Dockerfile
index f823a5f..94e8cbf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,7 @@
FROM ubuntu:14.04
ENV DEBIAN_FRONTEND noninteractive
+ENV NODE_SETUP_DOWNLOAD_SHA
30084249bdd56119cb61be682a56829a11a4c94e21c5d005d326dedb66776104
# Initial update and some basics.
# This odd double update seems necessary to get curl to download without 404
errors.
@@ -10,7 +11,10 @@ RUN apt-get update --fix-missing && \
apt-get install -y curl && \
apt-get update && \
apt-get remove -y nodejs && \
- curl -sL https://deb.nodesource.com/setup_8.x | bash - && \
+ curl -sL https://deb.nodesource.com/setup_8.x -o setup_8.x && \
+ echo "${NODE_SETUP_DOWNLOAD_SHA} setup_8.x" | sha256sum -c - && \
+ cat setup_8.x | bash - && \
+ rm setup_8.x && \
apt-get install -y nodejs
# only package.json
