diff --git a/Dockerfile b/Dockerfile index 4905122..2d8c15c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,12 +1,15 @@ FROM alpine:latest -# https://dist.torproject.org/torbrowser/8.0.5/tor-browser-linux64-8.0.5_en-US.tar.xz -RUN wget -O tor.tar.xz https://files.nixaid.com/tor-browser-linux64-8.0.5_en-US.tar.xz && \ - wget -O tor.tar.xz.asc https://www.torproject.org/dist/torbrowser/8.0.5/tor-browser-linux64-8.0.5_en-US.tar.xz.asc +# gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org +# gpg --output tor.keyring --export 0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290 +# https://dist.torproject.org/torbrowser/8.5.5/tor-browser-linux64-8.5.5_en-US.tar.xz +RUN wget -O tor.tar.xz https://files.nixaid.com/tor-browser-linux64-8.5.5_en-US.tar.xz && \ + wget -O tor.tar.xz.asc https://www.torproject.org/dist/torbrowser/8.5.5/tor-browser-linux64-8.5.5_en-US.tar.xz.asc COPY sha512sum.txt . +COPY tor.keyring . RUN apk add --update gnupg && \ sha512sum -c sha512sum.txt && \ - gpg --keyserver keyserver.ubuntu.com --recv-keys "EF6E286DDA85EA2A4BA7DE684E2C6E8793298290" && \ - gpg --verify tor.tar.xz.asc && \ + gpg --keyring ./tor.keyring -k "EF6E286DDA85EA2A4BA7DE684E2C6E8793298290" && \ + gpg --keyring ./tor.keyring --verify tor.tar.xz.asc && \ unxz tor.tar.xz FROM ubuntu:bionic diff --git a/sha512sum.txt b/sha512sum.txt index bdef342..e27cb06 100644 --- a/sha512sum.txt +++ b/sha512sum.txt @@ -1 +1 @@ -97fc61465039ed58d5667d3a275af3c5a3e579f5bc65356e3bb6f03a29b3ad7e16f4ad959a8829a0750690417221025e93992ef7f2de0d4dac91ab5d514d970b tor.tar.xz +d8206303ff0bc82849640020435ad713070d24fc6256c08dd230c2af8ac25f4a5dfea6308eb80c1bf4f93027aa79e7965ceec27d0a54e8a99768119e1745a2cf tor.tar.xz diff --git a/tor.keyring b/tor.keyring new file mode 100644 index 0000000..8d60f94 Binary files /dev/null and b/tor.keyring differ