diff options
| author | Thomas <thomas.giudici@proton.me> | 2026-06-22 11:33:02 +0200 |
|---|---|---|
| committer | Thomas <thomas.giudici@proton.me> | 2026-06-22 11:33:02 +0200 |
| commit | 3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5 (patch) | |
| tree | 98b962ddc78c9c51a03303d18f129dc15cdf2aab /Dockerfile.windows | |
| parent | 003e667576f38812e27cbb79125a0ba96036225d (diff) | |
| download | monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.tar.gz monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.tar.xz monzero-gui-3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5.zip | |
Dockerfiles: fetch dependencies over https instead of git:// / http://
The release Dockerfiles cloned Qt (code.qt.io) and libgpg-error/libgcrypt
(git.gnupg.org) over unauthenticated git://, and fetched libiconv
(ftp.gnu.org) over http://. Qt is tag-pinned only, so a MITM on its clone
could substitute source into the build. Switch them all to https, like
every other dependency in these files. The gnupg commit pins and the
libiconv sha256sum are unchanged.
Diffstat (limited to 'Dockerfile.windows')
| -rw-r--r-- | Dockerfile.windows | 28 |
1 files changed, 14 insertions, 14 deletions
diff --git a/Dockerfile.windows b/Dockerfile.windows index 07542705..2c760c68 100644 --- a/Dockerfile.windows +++ b/Dockerfile.windows @@ -21,19 +21,19 @@ RUN git clone -b v0.18.5.0 --depth 1 https://github.com/monero-project/monero && RUN make -j$THREADS -C /depends HOST=x86_64-w64-mingw32 NO_QT=1 -RUN git clone git://code.qt.io/qt/qt5.git -b ${QT_VERSION} --depth 1 && \ +RUN git clone https://code.qt.io/qt/qt5.git -b ${QT_VERSION} --depth 1 && \ cd qt5 && \ - git clone git://code.qt.io/qt/qtbase.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtdeclarative.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtgraphicaleffects.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtimageformats.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtmultimedia.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtquickcontrols.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtquickcontrols2.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtsvg.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qttools.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qttranslations.git -b ${QT_VERSION} --depth 1 && \ - git clone git://code.qt.io/qt/qtxmlpatterns.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtbase.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtdeclarative.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtgraphicaleffects.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtimageformats.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtmultimedia.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtquickcontrols.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtquickcontrols2.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtsvg.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qttools.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qttranslations.git -b ${QT_VERSION} --depth 1 && \ + git clone https://code.qt.io/qt/qtxmlpatterns.git -b ${QT_VERSION} --depth 1 && \ ./configure --prefix=/depends/x86_64-w64-mingw32 -xplatform win32-g++ \ -device-option CROSS_COMPILE=/usr/bin/x86_64-w64-mingw32- \ -I $(pwd)/qtbase/src/3rdparty/angle/include \ @@ -58,7 +58,7 @@ RUN git clone git://code.qt.io/qt/qt5.git -b ${QT_VERSION} --depth 1 && \ cd ../../../.. && \ rm -rf $(pwd) -RUN git clone -b libgpg-error-1.38 --depth 1 git://git.gnupg.org/libgpg-error.git && \ +RUN git clone -b libgpg-error-1.38 --depth 1 https://dev.gnupg.org/source/libgpg-error.git && \ cd libgpg-error && \ git reset --hard 71d278824c5fe61865f7927a2ed1aa3115f9e439 && \ ./autogen.sh && \ @@ -69,7 +69,7 @@ RUN git clone -b libgpg-error-1.38 --depth 1 git://git.gnupg.org/libgpg-error.gi cd .. && \ rm -rf libgpg-error -RUN git clone -b libgcrypt-1.8.5 --depth 1 git://git.gnupg.org/libgcrypt.git && \ +RUN git clone -b libgcrypt-1.8.5 --depth 1 https://dev.gnupg.org/source/libgcrypt.git && \ cd libgcrypt && \ git reset --hard 56606331bc2a80536db9fc11ad53695126007298 && \ ./autogen.sh && \ |