adservice: Changed install of glibc in builder to not require untrusted packages

This commit is contained in:
Colin Nelson 2018-10-05 10:42:54 -07:00
parent 8f1342adfc
commit 27cd7cab28

View file

@ -7,10 +7,10 @@ WORKDIR /app
# This is because the protoc-gen-grpc-java library
# is a glibc compiled binary and alpine is
# based on musl-libc
RUN apk add --no-cache --allow-untrusted \
-X https://apkproxy.herokuapp.com/sgerrand/alpine-pkg-glibc \
glibc \
glibc-bin
RUN apk --no-cache add ca-certificates && \
wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \
wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.28-r0/glibc-2.28-r0.apk && \
apk add glibc-2.28-r0.apk
# Next three steps are for caching dependency downloads
# to improve subsequent docker build.