Skip to content

Commit 87a4b9d

Browse files
tianonzakame
authored andcommitted
Add sha256 for "cpm" (and more defensive "curl"/"sha256sum" usage)
1 parent 09fc417 commit 87a4b9d

File tree

25 files changed

+225
-125
lines changed

25 files changed

+225
-125
lines changed

5.032.001-main,threaded-bullseye/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.32.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

5.032.001-main,threaded-buster/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.32.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

5.032.001-main-bullseye/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.32.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

5.032.001-main-buster/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
9+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.32.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

5.032.001-slim,threaded-bullseye/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,8 @@ RUN apt-get update \
2626
zlib1g-dev \
2727
xz-utils \
2828
libssl-dev \
29-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
29+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
3131
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
3232
&& rm perl-5.32.1.tar.xz \
3333
&& cat *.patch | patch -p1 \
@@ -39,11 +39,15 @@ RUN apt-get update \
3939
&& TEST_JOBS=$(nproc) make test_harness \
4040
&& make install \
4141
&& cd /usr/src \
42-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
42+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
4444
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
4545
&& cpanm IO::Socket::SSL \
46-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
46+
&& cd /usr/local/bin \
47+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
48+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
49+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
50+
&& chmod +x cpm \
4751
&& savedPackages="ca-certificates make netbase zlib1g-dev libssl-dev" \
4852
&& apt-mark auto '.*' > /dev/null \
4953
&& apt-mark manual $savedPackages \

5.032.001-slim,threaded-buster/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,8 @@ RUN apt-get update \
2626
zlib1g-dev \
2727
xz-utils \
2828
libssl-dev \
29-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
29+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
3131
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
3232
&& rm perl-5.32.1.tar.xz \
3333
&& cat *.patch | patch -p1 \
@@ -39,11 +39,15 @@ RUN apt-get update \
3939
&& TEST_JOBS=$(nproc) make test_harness \
4040
&& make install \
4141
&& cd /usr/src \
42-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
42+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
4444
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
4545
&& cpanm IO::Socket::SSL \
46-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
46+
&& cd /usr/local/bin \
47+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
48+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
49+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
50+
&& chmod +x cpm \
4751
&& savedPackages="ca-certificates make netbase zlib1g-dev libssl-dev" \
4852
&& apt-mark auto '.*' > /dev/null \
4953
&& apt-mark manual $savedPackages \

5.032.001-slim-bullseye/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,8 @@ RUN apt-get update \
2626
zlib1g-dev \
2727
xz-utils \
2828
libssl-dev \
29-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
29+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
3131
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
3232
&& rm perl-5.32.1.tar.xz \
3333
&& cat *.patch | patch -p1 \
@@ -39,11 +39,15 @@ RUN apt-get update \
3939
&& TEST_JOBS=$(nproc) make test_harness \
4040
&& make install \
4141
&& cd /usr/src \
42-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
42+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
4444
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
4545
&& cpanm IO::Socket::SSL \
46-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
46+
&& cd /usr/local/bin \
47+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
48+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
49+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
50+
&& chmod +x cpm \
4751
&& savedPackages="ca-certificates make netbase zlib1g-dev libssl-dev" \
4852
&& apt-mark auto '.*' > /dev/null \
4953
&& apt-mark manual $savedPackages \

5.032.001-slim-buster/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,8 +26,8 @@ RUN apt-get update \
2626
zlib1g-dev \
2727
xz-utils \
2828
libssl-dev \
29-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30-
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum -c - \
29+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.32.1.tar.xz -o perl-5.32.1.tar.xz \
30+
&& echo '57cc47c735c8300a8ce2fa0643507b44c4ae59012bfdad0121313db639e02309 *perl-5.32.1.tar.xz' | sha256sum --strict --check - \
3131
&& tar --strip-components=1 -xaf perl-5.32.1.tar.xz -C /usr/src/perl \
3232
&& rm perl-5.32.1.tar.xz \
3333
&& cat *.patch | patch -p1 \
@@ -39,11 +39,15 @@ RUN apt-get update \
3939
&& TEST_JOBS=$(nproc) make test_harness \
4040
&& make install \
4141
&& cd /usr/src \
42-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
42+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
43+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
4444
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
4545
&& cpanm IO::Socket::SSL \
46-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
46+
&& cd /usr/local/bin \
47+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
48+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
49+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
50+
&& chmod +x cpm \
4751
&& savedPackages="ca-certificates make netbase zlib1g-dev libssl-dev" \
4852
&& apt-mark auto '.*' > /dev/null \
4953
&& apt-mark manual $savedPackages \

5.034.001-main,threaded-bullseye/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.34.1.tar.xz -o perl-5.34.1.tar.xz \
9-
&& echo '6d52cf833ff1af27bb5e986870a2c30cec73c044b41e3458cd991f94374039f7 *perl-5.34.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.34.1.tar.xz -o perl-5.34.1.tar.xz \
9+
&& echo '6d52cf833ff1af27bb5e986870a2c30cec73c044b41e3458cd991f94374039f7 *perl-5.34.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.34.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.34.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

5.034.001-main,threaded-buster/Dockerfile

Lines changed: 9 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,8 @@ COPY *.patch /usr/src/perl/
55
WORKDIR /usr/src/perl
66

77
RUN true \
8-
&& curl -SL https://www.cpan.org/src/5.0/perl-5.34.1.tar.xz -o perl-5.34.1.tar.xz \
9-
&& echo '6d52cf833ff1af27bb5e986870a2c30cec73c044b41e3458cd991f94374039f7 *perl-5.34.1.tar.xz' | sha256sum -c - \
8+
&& curl -fL https://www.cpan.org/src/5.0/perl-5.34.1.tar.xz -o perl-5.34.1.tar.xz \
9+
&& echo '6d52cf833ff1af27bb5e986870a2c30cec73c044b41e3458cd991f94374039f7 *perl-5.34.1.tar.xz' | sha256sum --strict --check - \
1010
&& tar --strip-components=1 -xaf perl-5.34.1.tar.xz -C /usr/src/perl \
1111
&& rm perl-5.34.1.tar.xz \
1212
&& cat *.patch | patch -p1 \
@@ -18,11 +18,15 @@ RUN true \
1818
&& TEST_JOBS=$(nproc) make test_harness \
1919
&& make install \
2020
&& cd /usr/src \
21-
&& curl -LO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22-
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum -c - \
21+
&& curl -fLO https://www.cpan.org/authors/id/M/MI/MIYAGAWA/App-cpanminus-1.7046.tar.gz \
22+
&& echo '3e8c9d9b44a7348f9acc917163dbfc15bd5ea72501492cea3a35b346440ff862 *App-cpanminus-1.7046.tar.gz' | sha256sum --strict --check - \
2323
&& tar -xzf App-cpanminus-1.7046.tar.gz && cd App-cpanminus-1.7046 && perl bin/cpanm . && cd /root \
2424
&& cpanm IO::Socket::SSL \
25-
&& cd /usr/local/bin && curl -LO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm && chmod +x cpm \
25+
&& cd /usr/local/bin \
26+
&& curl -fLO https://raw.githubusercontent.com/skaji/cpm/0.997011/cpm \
27+
# sha256 checksum is from docker-perl team, cf https://github.com/docker-library/official-images/pull/12612#issuecomment-1158288299
28+
&& echo '7dee2176a450a8be3a6b9b91dac603a0c3a7e807042626d3fe6c93d843f75610 *cpm' | sha256sum --strict --check - \
29+
&& chmod +x cpm \
2630
&& true \
2731
&& rm -fr ./cpanm /root/.cpanm /usr/src/perl /usr/src/App-cpanminus-1.7046* /tmp/*
2832

0 commit comments

Comments
 (0)