From 6df9306f714f50e9d219f5ca68aff5459f047d0c Mon Sep 17 00:00:00 2001
From: Michael McVady <femtonaut@gmail.com>
Date: Sat, 8 Jul 2023 19:11:10 -0500
Subject: Check sha256 hash

---
 Dockerfile | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'Dockerfile')

diff --git a/Dockerfile b/Dockerfile
index e34e467..54e8b02 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,6 +3,7 @@ FROM debian:bullseye-slim AS build-stage
 COPY . /tmp/clog
 
 ARG KORE_VERSION=4.3.0-rc2
+ARG KORE_SHA256=e9e3c9faa02b6c9c81da4d98ac4b99e4b874c41ac642b2f2a6b087f998d3cf62
 
 RUN set -e \
 	&& apt-get update -qq \
@@ -15,9 +16,12 @@ RUN set -e \
 		libssl-dev \
 		libpq-dev \
 	&& cd /tmp \
-	&& curl https://kore.io/releases/kore-${KORE_VERSION}.tar.gz --output kore-${KORE_VERSION}.tar.gz \
-	&& tar xf kore-${KORE_VERSION}.tar.gz \
-	&& cd kore-${KORE_VERSION} \
+	&& curl "https://kore.io/releases/kore-${KORE_VERSION}.tar.gz" --output "kore-${KORE_VERSION}.tar.gz" \
+	&& echo "${KORE_SHA256}  kore-${KORE_VERSION}.tar.gz" > "kore-${KORE_VERSION}.tar.gz.sha256" \
+	&& cat "kore-${KORE_VERSION}.tar.gz.sha256" \
+	&& sha256sum -c "kore-${KORE_VERSION}.tar.gz.sha256" \
+	&& tar xf "kore-${KORE_VERSION}.tar.gz" \
+	&& cd "kore-${KORE_VERSION}" \
 	&& make \
 	&& make install \
 	&& cd /tmp/clog \
-- 
cgit v1.2.3