From 27cd7cab2862efebcd7b714e3066afc3c9a81736 Mon Sep 17 00:00:00 2001 From: Colin Nelson Date: Fri, 5 Oct 2018 10:42:54 -0700 Subject: [PATCH] adservice: Changed install of glibc in builder to not require untrusted packages --- src/adservice/Dockerfile | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/adservice/Dockerfile b/src/adservice/Dockerfile index c4e1abc..caac9e0 100644 --- a/src/adservice/Dockerfile +++ b/src/adservice/Dockerfile @@ -7,10 +7,10 @@ WORKDIR /app # This is because the protoc-gen-grpc-java library # is a glibc compiled binary and alpine is # based on musl-libc -RUN apk add --no-cache --allow-untrusted \ - -X https://apkproxy.herokuapp.com/sgerrand/alpine-pkg-glibc \ - glibc \ - glibc-bin +RUN apk --no-cache add ca-certificates && \ + wget -q -O /etc/apk/keys/sgerrand.rsa.pub https://alpine-pkgs.sgerrand.com/sgerrand.rsa.pub && \ + wget https://github.com/sgerrand/alpine-pkg-glibc/releases/download/2.28-r0/glibc-2.28-r0.apk && \ + apk add glibc-2.28-r0.apk # Next three steps are for caching dependency downloads # to improve subsequent docker build.