Skip to content

Commit

Permalink
Install python-gpgme so dropbox can verify its binary download
Browse files Browse the repository at this point in the history
We need to trust Dropbox (well, not really, that's why we're running
it in a Docker container :-), but we shouldn't need to trust any
random FBI or KGB agent trying to carry out a man-in-the-middle
attack.

Signed-off-by: Theodore Ts'o <tytso@mit.edu>
  • Loading branch information
tytso committed Oct 3, 2016
1 parent 9891b7f commit f96221b
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ RUN echo 'deb http://linux.dropbox.com/debian jessie main' > /etc/apt/sources.li
&& apt-key adv --keyserver pgp.mit.edu --recv-keys 1C61A2656FB57B7E4DE0F4C1FC918B335044912E \
&& apt-get -qqy update \
# Note 'ca-certificates' dependency is required for 'dropbox start -i' to succeed
&& apt-get -qqy install ca-certificates curl dropbox \
&& apt-get -qqy install ca-certificates curl python-gpgme dropbox \
# Perform image clean up.
&& apt-get -qqy autoclean \
&& rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/* \
Expand Down Expand Up @@ -48,4 +48,4 @@ COPY dropbox /usr/bin/dropbox
WORKDIR /dbox/Dropbox
EXPOSE 17500
VOLUME ["/dbox/.dropbox", "/dbox/Dropbox"]
ENTRYPOINT ["/root/run"]
ENTRYPOINT ["/root/run"]

0 comments on commit f96221b

Please sign in to comment.