Skip to content
Snippets Groups Projects
Commit 76de7cca authored by akwizgran's avatar akwizgran
Browse files

Remove references to IGNORE_EXPIRY.

parent 785451b9
Branches
Tags
1 merge request!11Simplify zip paths, update Go and NDK
Pipeline #13452 passed with warnings
FROM debian:bullseye FROM debian:bullseye
ARG IGNORE_EXPIRY=0
ENV LANG=C.UTF-8 ENV LANG=C.UTF-8
ENV DEBIAN_FRONTEND=noninteractive ENV DEBIAN_FRONTEND=noninteractive
......
...@@ -55,13 +55,10 @@ Build our Docker image: ...@@ -55,13 +55,10 @@ Build our Docker image:
docker build -t briar/go-reproducer go-reproducer docker build -t briar/go-reproducer go-reproducer
Building the image might fail due to expired Debian packages. To ensure reproducibility we build the image from a fixed snapshot of Debian
You can disable the expiry check by adding a build argument: and ignore expiry warnings for Debian packages. This means the build process
inside the Docker container may use outdated packages that could contain
docker build --build-arg IGNORE_EXPIRY=1 -t briar/go-reproducer go-reproducer known vulnerabilities.
However, note that this might expose the build process to MITM attacks
which inject outdated vulnerable packages.
### Run the verification ### Run the verification
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment