Security: Docker Compose download lacks integrity verification in helper script

[coderabbitai]

Problem

The helper script dashboard-deployments/system-monitoring-influxdb2-flux-grafana/helper_scripts/install-docker-aws-ec2.sh downloads the Docker Compose binary from GitHub without verifying its integrity, which poses a supply-chain security risk.

Location

File: dashboard-deployments/system-monitoring-influxdb2-flux-grafana/helper_scripts/install-docker-aws-ec2.sh
Lines: 16-18

Details

The script currently downloads the Docker Compose binary directly without:

• Checksum verification
• GPG signature verification
• Architecture detection for aarch64/Graviton instances

This creates a potential security vulnerability where a compromised binary could be executed without detection.

Context

This issue was identified during review of PR #4 but is being tracked separately as it's unrelated to the documentation changes in that PR.

References

• Original PR: Write more documentation on the metrics dashboard #4
• Comment thread: Write more documentation on the metrics dashboard #4 (comment)
• Requested by: @daniel-falk