mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-09-01 07:00:10 +00:00
pull base images with content trust for binfmt, rngd, tini, toybox-media
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
This commit is contained in:
@@ -2,6 +2,7 @@
|
||||
default: push
|
||||
|
||||
IMAGE=rngd
|
||||
BASE=linuxkit/c-compile:f52f485825c890d581e82a62af6906c1d33d8e5d
|
||||
SHA_IMAGE=alpine:3.5@sha256:dfbd4a3a8ebca874ebd2474f044a0b33600d4523d03b0df76e5c5986cb02d7e8
|
||||
DEPS=Dockerfile Makefile
|
||||
|
||||
@@ -9,8 +10,10 @@ hash: $(DEPS)
|
||||
find $^ -type f | xargs cat | docker run --rm -i $(SHA_IMAGE) sha1sum - | sed 's/ .*//' > hash
|
||||
|
||||
tag: hash
|
||||
DOCKER_CONTENT_TRUST=1 docker pull $(BASE)
|
||||
docker pull linuxkit/$(IMAGE):$(shell cat hash) || \
|
||||
(docker build --no-cache -t $(IMAGE):build . && \
|
||||
(DOCKER_CONTENT_TRUST=1 docker pull $(BASE) && \
|
||||
docker build --no-cache -t $(IMAGE):build . && \
|
||||
docker tag $(IMAGE):build linuxkit/$(IMAGE):$(shell cat hash))
|
||||
|
||||
push: tag
|
||||
|
Reference in New Issue
Block a user