Changed checksum validation to use locally stored copy of checksum va…

…lue. (#75)
GoogleCloudPlatform · Mar 25, 2017 · f7e3f61 · f7e3f61
1 parent 596237b
commit f7e3f61
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/runtime-builder/Dockerfile b/runtime-builder/Dockerfile
@@ -30,11 +30,14 @@ ARG debian_tag
 ENV GO_VERSION ${go_version}
 ENV DEBIAN_TAG ${debian_tag}
 
+# Copy checksum for use in validation.
+COPY checksums/go${GO_VERSION}.sha256 /tmp/
+
+# Download SDK and validate.
 RUN curl -sSL https://storage.googleapis.com/golang/go${GO_VERSION}.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
-    curl -sSL https://storage.googleapis.com/golang/go${GO_VERSION}.linux-amd64.tar.gz.sha256 -o /tmp/go.tar.gz.sha256 && \
-    echo "$(cat /tmp/go.tar.gz.sha256)  /tmp/go.tar.gz" | sha256sum -c - && \
+    echo "$(cat /tmp/go${GO_VERSION}.sha256)  /tmp/go.tar.gz" | sha256sum -c - && \
     tar -C /usr/local -xzf /tmp/go.tar.gz && \
-    rm /tmp/go.tar.gz /tmp/go.tar.gz.sha256
+    rm /tmp/go.tar.gz /tmp/go${GO_VERSION}.sha256
 
 COPY go-build.sh /usr/local/bin/
 COPY go-run.sh /usr/local/bin/

diff --git a/runtime-builder/checksums/go1.8.sha256 b/runtime-builder/checksums/go1.8.sha256
@@ -0,0 +1 @@
+53ab94104ee3923e228a2cb2116e5e462ad3ebaeea06ff04463479d7f12d27ca