diff options
| author | Thomas <thomas.giudici@proton.me> | 2026-06-22 11:33:02 +0200 |
|---|---|---|
| committer | Thomas <thomas.giudici@proton.me> | 2026-06-22 11:33:02 +0200 |
| commit | 3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5 (patch) | |
| tree | 98b962ddc78c9c51a03303d18f129dc15cdf2aab /Dockerfile.linux | |
| parent | 003e667576f38812e27cbb79125a0ba96036225d (diff) | |
| download | monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.tar.gz monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.tar.xz monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.zip | |
Dockerfiles: fetch dependencies over https instead of git:// / http://
The release Dockerfiles cloned Qt (code.qt.io) and libgpg-error/libgcrypt
(git.gnupg.org) over unauthenticated git://, and fetched libiconv
(ftp.gnu.org) over http://. Qt is tag-pinned only, so a MITM on its clone
could substitute source into the build. Switch them all to https, like
every other dependency in these files. The gnupg commit pins and the
libiconv sha256sum are unchanged.
Diffstat (limited to 'Dockerfile.linux')
| -rw-r--r-- | Dockerfile.linux | 30 |
1 files changed, 15 insertions, 15 deletions
diff --git a/Dockerfile.linux b/Dockerfile.linux index dc5795cf..1e08748b 100644 --- a/Dockerfile.linux +++ b/Dockerfile.linux @@ -188,20 +188,20 @@ RUN wget https://www.nlnetlabs.nl/downloads/unbound/unbound-1.16.2.tar.gz && \ RUN rm /usr/lib/x86_64-linux-gnu/libX11.a && \ rm /usr/lib/x86_64-linux-gnu/libXext.a && \ rm /usr/lib/x86_64-linux-gnu/libX11-xcb.a && \ - git clone git://code.qt.io/qt/qt5.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qt5.git -b ${QT_VERSION} --depth 1 && \ cd qt5 && \ - git clone git://code.qt.io/qt/qtbase.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtdeclarative.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtgraphicaleffects.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtimageformats.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtmultimedia.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtquickcontrols.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtquickcontrols2.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtsvg.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qttools.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qttranslations.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtx11extras.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtxmlpatterns.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtbase.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtdeclarative.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtgraphicaleffects.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtimageformats.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtmultimedia.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtquickcontrols.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtquickcontrols2.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtsvg.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qttools.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qttranslations.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtx11extras.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtxmlpatterns.git -b ${QT_VERSION} --depth 1 && \ sed -ri s/\(Libs:.*\)/\\1\ -lexpat/ /usr/local/lib/pkgconfig/fontconfig.pc && \ sed -ri s/\(Libs:.*\)/\\1\ -lz/ /usr/local/lib/pkgconfig/freetype2.pc && \ sed -ri s/\(Libs:.*\)/\\1\ -lXau/ /usr/local/lib/pkgconfig/xcb.pc && \ @@ -251,7 +251,7 @@ RUN git clone -b v4.3.4 --depth 1 https://github.com/zeromq/libzmq && \ make -j$THREADS install && \ rm -rf $(pwd) -RUN git clone -b libgpg-error-1.45 --depth 1 git://git.gnupg.org/libgpg-error.git && \ +RUN git clone -b libgpg-error-1.45 --depth 1 https://dev.gnupg.org/source/libgpg-error.git && \ cd libgpg-error && \ git reset --hard dbac537e5e865fb6f3aa8596d213aa8c47a9dea1 && \ ./autogen.sh && \ @@ -260,7 +260,7 @@ RUN git clone -b libgpg-error-1.45 --depth 1 git://git.gnupg.org/libgpg-error.gi make -j$THREADS install && \ rm -rf $(pwd) -RUN git clone -b libgcrypt-1.10.1 --depth 1 git://git.gnupg.org/libgcrypt.git && \ +RUN git clone -b libgcrypt-1.10.1 --depth 1 https://dev.gnupg.org/source/libgcrypt.git && \ cd libgcrypt && \ git reset --hard ae0e567820c37f9640440b3cff77d7c185aa6742 && \ ./autogen.sh && \ |