tor: compile from source and verify tarball using gpg

This commit is contained in:
Wonderfall 2016-05-08 00:37:04 +02:00
parent d15d95da62
commit f21dc4ee37

View File

@ -1,16 +1,39 @@
FROM alpine:edge FROM alpine:3.3
ARG ARM_VERSION=1.4.5.0 ARG ARM_VERSION=1.4.5.0
ARG TOR_VERSION=0.2.7.6
ARG TOR_USER_ID=45553
ENV TERM=xterm ENV TERM=xterm
VOLUME /tor /torconfig VOLUME /usr/local/etc/tor
RUN echo "@testing http://nl.alpinelinux.org/alpine/edge/testing" >> /etc/apk/repositories \ RUN BUILD_DEPS=" \
&& apk -U add tor@testing python openssl ca-certificates \ libevent-dev \
&& wget -q https://www.atagar.com/arm/resources/static/arm-${ARM_VERSION}.tar.bz2 -P /tmp \ openssl-dev \
&& tar xjf /tmp/arm-${ARM_VERSION}.tar.bz2 -C /tmp && cd /tmp/arm && ./install \ build-base \
&& rm -rf /var/cache/apk/* /tmp/* \ gnupg \
&& chown -R tor /etc/tor /tor /torconfig ca-certificates" \
&& apk -U add \
${BUILD_DEPS} \
python \
libevent \
openssl \
&& cd /tmp \
&& wget -q https://www.torproject.org/dist/tor-${TOR_VERSION}.tar.gz \
&& wget -q https://www.torproject.org/dist/tor-${TOR_VERSION}.tar.gz.asc \
&& gpg --keyserver keys.gnupg.net --recv-keys 0x165733EA \
&& gpg --verify tor-0.2.7.6.tar.gz.asc \
&& tar xzf tor-${TOR_VERSION}.tar.gz \
&& cd tor-${TOR_VERSION} \
&& ./configure --disable-asciidoc \
&& make && make install \
&& adduser -H -D -s /sbin/nologin -u ${TOR_USER_ID} tor \
&& cd /tmp \
&& wget -q https://www.atagar.com/arm/resources/static/arm-${ARM_VERSION}.tar.bz2 \
&& tar xjf /tmp/arm-${ARM_VERSION}.tar.bz2 && cd arm && ./install \
&& apk del ${BUILD_DEPS} \
&& rm -rf /var/cache/apk/* /tmp/*
EXPOSE 9001 9030 EXPOSE 9001 9030
USER tor USER tor