Verify hardened_malloc with a key in the repo instead of fetching it

This commit is contained in:
Cat /dev/Nulo 2021-12-08 22:31:50 -03:00
parent 499e2d3a23
commit 2263c3d3ca
2 changed files with 133 additions and 1 deletions

View file

@ -27,8 +27,9 @@ FROM alpine:${ALPINE_VERSION} as build-malloc
ARG HARDENED_MALLOC_VERSION
ARG CONFIG_NATIVE=false
COPY thestinger.gpg /tmp/
RUN apk --no-cache add build-base git gnupg && cd /tmp \
&& wget -q https://github.com/thestinger.gpg && gpg --import thestinger.gpg \
&& gpg --import /tmp/thestinger.gpg \
&& git clone --depth 1 --branch ${HARDENED_MALLOC_VERSION} https://github.com/GrapheneOS/hardened_malloc \
&& cd hardened_malloc && git verify-tag $(git describe --tags) \
&& make CONFIG_NATIVE=${CONFIG_NATIVE}

131
thestinger.gpg Normal file
View file

@ -0,0 +1,131 @@
-----BEGIN PGP PUBLIC KEY BLOCK-----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=u0y4
-----END PGP PUBLIC KEY BLOCK-----