From adb9a6e85716102de11de0d92977c55b3a75e864 Mon Sep 17 00:00:00 2001 From: Jamie Strandboge Date: Tue, 8 Jul 2025 13:26:21 -0500 Subject: [PATCH] chore: update Dockerfile.pytest to verify primary key fingerprint --- Dockerfile.pytest | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile.pytest b/Dockerfile.pytest index 0253c33e8..23803637d 100644 --- a/Dockerfile.pytest +++ b/Dockerfile.pytest @@ -7,7 +7,7 @@ FROM golang:latest # Primary key fingerprint: 24C9 75CB A61A 024E E1B6 3178 7C3D 5715 9FC2 F927 # Subkey fingerprint: 9D53 9D90 D332 8DC7 D6C8 D3B9 D8FF 8E1F 7DF8 B07E ADD https://repos.influxdata.com/influxdata-archive.key ./influxdata-archive.key -RUN echo '943666881a1b8d9b849b74caebf02d3465d6beb716510d86a39f6c8e8dac7515 influxdata-archive.key' | sha256sum -c && cat influxdata-archive.key | gpg --dearmor | tee /etc/apt/trusted.gpg.d/influxdata-archive.gpg > /dev/null +RUN gpg --no-default-keyring --homedir /nonexistent --show-keys ./influxdata-archive.key | grep -q "24C975CBA61A024EE1B631787C3D57159FC2F927" && cat influxdata-archive.key | gpg --dearmor | tee /etc/apt/trusted.gpg.d/influxdata-archive.gpg > /dev/null RUN echo 'deb [signed-by=/etc/apt/trusted.gpg.d/influxdata-archive.gpg] https://repos.influxdata.com/debian stable main' | tee /etc/apt/sources.list.d/influxdata.list