Merge pull request #8 from Intellection/add_pkg_shasum_check

Add SHA check of package
Intellection · Sep 19, 2016 · 676f2dd · 676f2dd
2 parents 7686131 + 82ac174
commit 676f2dd
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.1-1
+
+* Add SHA check of package.
+
 ## 2.1
 
 * Package `oauth2_proxy` v2.1 with Alpine 3.4 base image.
diff --git a/Dockerfile b/Dockerfile
@@ -3,13 +3,15 @@ FROM alpine:3.4
 ENV BUILD_PKGS="ca-certificates wget"
 
 ENV OAUTH2_PROXY_VERSION="2.1"
-ENV OAUTH2_PROXY_PKG="oauth2_proxy-${OAUTH2_PROXY_VERSION}.linux-amd64.go1.6"
+ENV OAUTH2_PROXY_PKG="oauth2_proxy-${OAUTH2_PROXY_VERSION}.linux-amd64.go1.6" \
+    OAUTH2_PROXY_SHA="3061e5b04bd14eeb9ec0ad1c9b324ba8d99d50eaadc5f528cdf4d21043828298"
 RUN apk update && \
     apk upgrade && \
     apk add $BUILD_PKGS && \
     mkdir -p /var/tmp/oauth2_proxy && \
     cd /var/tmp/oauth2_proxy && \
     wget --progress=dot:mega https://github.com/bitly/oauth2_proxy/releases/download/v${OAUTH2_PROXY_VERSION}/${OAUTH2_PROXY_PKG}.tar.gz && \
+    echo "${OAUTH2_PROXY_SHA} *${OAUTH2_PROXY_PKG}.tar.gz" | sha256sum -c - && \
     tar xvf ${OAUTH2_PROXY_PKG}.tar.gz && \
     cp /var/tmp/oauth2_proxy/${OAUTH2_PROXY_PKG}/oauth2_proxy /bin/ && \
     apk del $BUILD_PKGS && \