Skip to content

Commit 7a79a82

Browse files
authored
change gpg verify
1 parent 2beb959 commit 7a79a82

File tree

1 file changed

+12
-2
lines changed

1 file changed

+12
-2
lines changed

Dockerfile

Lines changed: 12 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -132,8 +132,18 @@ RUN \
132132
&& curl -fSL http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz -o nginx.tar.gz \
133133
&& curl -fSL http://nginx.org/download/nginx-$NGINX_VERSION.tar.gz.asc -o nginx.tar.gz.asc \
134134
&& export GNUPGHOME="$(mktemp -d)" \
135-
&& gpg --keyserver ha.pool.sks-keyservers.net --recv-keys "$GPG_KEYS" \
136-
&& gpg --batch --verify nginx.tar.gz.asc nginx.tar.gz \
135+
&& found=''; \
136+
for server in \
137+
ha.pool.sks-keyservers.net \
138+
hkp://keyserver.ubuntu.com:80 \
139+
hkp://p80.pool.sks-keyservers.net:80 \
140+
pgp.mit.edu \
141+
; do \
142+
echo "Fetching GPG key $GPG_KEYS from $server"; \
143+
gpg --keyserver "$server" --keyserver-options timeout=10 --recv-keys "$GPG_KEYS" && found=yes && break; \
144+
done; \
145+
test -z "$found" && echo >&2 "error: failed to fetch GPG key $GPG_KEYS" && exit 1; \
146+
gpg --batch --verify nginx.tar.gz.asc nginx.tar.gz \
137147
&& rm -r "$GNUPGHOME" nginx.tar.gz.asc \
138148
&& tar -zxC /usr/src -f nginx.tar.gz \
139149
&& rm nginx.tar.gz \

0 commit comments

Comments
 (0)