Skip to content

Commit 5ee7ef5

Browse files
committed
Enforce the full OpenPGP fingerprint of ppa:bitcoin/bitcoin
Previously, basically anyone in the position to MITM the network connection of the build server for this image could have easily compromised it! Source: https://launchpad.net/~bitcoin/+archive/ubuntu/bitcoin
1 parent e227026 commit 5ee7ef5

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Dockerfile

+1-1
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ ENV GROUP_ID ${GROUP_ID:-1000}
1414
RUN groupadd -g ${GROUP_ID} bitcoin \
1515
&& useradd -u ${USER_ID} -g bitcoin -s /bin/bash -m -d /bitcoin bitcoin
1616

17-
RUN apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 8842ce5e && \
17+
RUN apt-key adv --keyserver keyserver.ubuntu.com --recv-keys C70EF1F0305A1ADB9986DBD8D46F45428842CE5E && \
1818
echo "deb http://ppa.launchpad.net/bitcoin/bitcoin/ubuntu xenial main" > /etc/apt/sources.list.d/bitcoin.list
1919

2020
RUN apt-get update && apt-get install -y --no-install-recommends \

0 commit comments

Comments
 (0)