6c10bd8113
This seems flaky, commonly gives "keys: key 4E2C6E8793298290 can't be retrieved, gpg: no valid OpenPGP data found." Not sure what's up, but keeping a separate layer cached makes it more probably that this flakiness will still build.
50 lines
1.4 KiB
Docker
50 lines
1.4 KiB
Docker
FROM debian
|
|
|
|
# TODO(hkjn): Use alpine as base.
|
|
|
|
MAINTAINER Henrik Jonsson <me@hkjn.me>
|
|
|
|
ENV TOR_VERSION 6.0a5-hardened
|
|
ENV SHA256_CHECKSUM f5224c78c3f0da2df4286a6e33a4afec3339a9d6848ff9b6480a42214b8bed8c
|
|
ENV LANG C.UTF-8
|
|
ENV RELEASE_FILE tor-browser-linux64-${TOR_VERSION}_ALL.tar.xz
|
|
ENV RELEASE_KEY 0x4E2C6E8793298290
|
|
ENV RELEASE_URL https://dist.torproject.org/torbrowser/${TOR_VERSION}/${RELEASE_FILE}
|
|
|
|
RUN apt-get update && \
|
|
apt-get install -y \
|
|
ca-certificates \
|
|
curl \
|
|
libasound2 \
|
|
libdbus-glib-1-2 \
|
|
libgtk2.0-0 \
|
|
libxrender1 \
|
|
libxt6 \
|
|
xz-utils && \
|
|
rm -rf /var/lib/apt/lists/*
|
|
|
|
ENV HOME /home/user
|
|
RUN useradd --create-home --home-dir $HOME user && \
|
|
chown -R user:user $HOME
|
|
|
|
WORKDIR /usr/local/bin
|
|
|
|
RUN gpg --keyserver pgp.mit.edu --recv-keys $RELEASE_KEY
|
|
RUN curl --fail -O -sSL ${RELEASE_URL} && \
|
|
curl --fail -O -sSL ${RELEASE_URL}.asc && \
|
|
gpg --verify ${RELEASE_FILE}.asc && \
|
|
echo "$SHA256_CHECKSUM $RELEASE_FILE" > sha256sums.txt && \
|
|
sha256sum -c sha256sums.txt && \
|
|
tar --strip-components=1 -vxJf ${RELEASE_FILE} && \
|
|
rm -v ${RELEASE_FILE}* sha256sums.txt && \
|
|
mkdir /usr/local/bin/Browser/Downloads && \
|
|
chown -R user:user /usr/local/bin/Browser/Downloads
|
|
rm -v ${RELEASE_FILE}*
|
|
|
|
WORKDIR /usr/local/bin/Browser/Downloads
|
|
USER user
|
|
|
|
COPY [ "start.sh", "/usr/local/bin/" ]
|
|
|
|
CMD [ "start.sh" ]
|