From 4b7c867806d0edc9635ae2dd7c14820fa6de53db Mon Sep 17 00:00:00 2001 From: Markus Frosch Date: Tue, 14 Apr 2015 22:30:41 +0200 Subject: [PATCH] Use long GPG key ids for security This avoids possible flaws against duplicate or manipulated keys. The Postgres keys should be fine, because it gets downloaded via https. --- Dockerfile | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Dockerfile b/Dockerfile index 2b30268f..39cbcec3 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,11 +1,11 @@ FROM sameersbn/ubuntu:14.04.20150323 MAINTAINER sameer@damagehead.com -RUN apt-key adv --keyserver keyserver.ubuntu.com --recv E1DF1F24 \ +RUN apt-key adv --keyserver keyserver.ubuntu.com --recv E1DD270288B4E6030699E45FA1715D88E1DF1F24 \ && echo "deb http://ppa.launchpad.net/git-core/ppa/ubuntu trusty main" >> /etc/apt/sources.list \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv C3173AA6 \ + && apt-key adv --keyserver keyserver.ubuntu.com --recv 80F70E11F0F0D5F10CB20E62F5DA5F09C3173AA6 \ && echo "deb http://ppa.launchpad.net/brightbox/ruby-ng/ubuntu trusty main" >> /etc/apt/sources.list \ - && apt-key adv --keyserver keyserver.ubuntu.com --recv C300EE8C \ + && apt-key adv --keyserver keyserver.ubuntu.com --recv 8B3981E7A6852F782CC4951600A6F0A3C300EE8C \ && echo "deb http://ppa.launchpad.net/nginx/stable/ubuntu trusty main" >> /etc/apt/sources.list \ && wget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | apt-key add - \ && echo 'deb http://apt.postgresql.org/pub/repos/apt/ trusty-pgdg main' > /etc/apt/sources.list.d/pgdg.list \