Use safer curl invocations in Container builds

Calls to `curl` will now use the `--fail` option, in addition to
`--silent` and `--show-error`, in an effort to catch issues with server
or client-side errors.
This commit is contained in:
Alex Palaistras 2023-12-21 16:56:31 +00:00
parent dd570cc4b0
commit f710c4846f
5 changed files with 7 additions and 7 deletions

View File

@ -5,7 +5,7 @@ ENV PACKAGE_URL https://dl.gitea.io/gitea/${VERSION}/gitea-${VERSION}-linux-amd6
RUN apt-get update -y && apt-get upgrade -y && apt-get install -y --no-install-recommends \
curl ca-certificates gettext gosu git openssh-client gnupg
RUN curl -L -o /usr/bin/gitea ${PACKAGE_URL} && chmod +x /usr/bin/gitea
RUN curl --fail --silent --show-error --location -o /usr/bin/gitea ${PACKAGE_URL} && chmod +x /usr/bin/gitea
RUN addgroup --system --gid 10000 git
RUN adduser --system --uid 10000 --ingroup git --home /var/lib/gitea git

View File

@ -5,7 +5,7 @@ ENV PACKAGE_URL https://github.com/superseriousbusiness/gotosocial/releases/down
RUN apt-get update -y && apt-get upgrade -y && apt-get install -y --no-install-recommends \
curl ca-certificates gettext gosu
RUN mkdir -p /opt/gotosocial && curl -L ${PACKAGE_URL} | tar -C /opt/gotosocial --no-same-owner -xvzf - && \
RUN mkdir -p /opt/gotosocial && curl -fsSL ${PACKAGE_URL} | tar -C /opt/gotosocial --no-same-owner -xvzf - && \
mv /opt/gotosocial/gotosocial /bin/gotosocial && chmod +x /bin/gotosocial
RUN addgroup --system --gid 10000 gotosocial

View File

@ -7,7 +7,7 @@ RUN apt-get update -y && apt-get upgrade -y && \
RUN addgroup --system --gid 10000 grafana
RUN adduser --system --uid 10000 --ingroup grafana --home /var/lib/grafana grafana
RUN curl --silent --show-error -L https://dl.grafana.com/oss/release/grafana-${VERSION}.linux-amd64.tar.gz | \
RUN curl -fsSL https://dl.grafana.com/oss/release/grafana-${VERSION}.linux-amd64.tar.gz | \
tar -C /opt --no-same-owner -xvzf - && mv /opt/grafana-v${VERSION} /opt/grafana
COPY container/config /etc/grafana

View File

@ -11,8 +11,8 @@ ARG VERSION=0.121.1 # renovate: datasource=github-releases depName=gohugoio/hugo
RUN apt-get update -y && apt-get install -y --no-install-recommends \
ca-certificates curl git gettext gosu openssh-client
RUN curl -L https://github.com/gohugoio/hugo/releases/download/v${VERSION}/hugo_${VERSION}_Linux-64bit.tar.gz | \
tar -C /bin --no-same-owner -xvzf - hugo && chmod +x /bin/hugo
RUN curl -fsSL https://github.com/gohugoio/hugo/releases/download/v${VERSION}/hugo_${VERSION}_Linux-64bit.tar.gz | \
tar -C /bin --no-same-owner -xvzf - hugo && chmod +x /bin/hugo
RUN addgroup --system --gid 10000 hugo
RUN adduser --system --uid 10000 --ingroup hugo --no-create-home hugo

View File

@ -17,14 +17,14 @@ RUN apt-get update -y && apt-get upgrade -y && \
RUN addgroup --system --gid 10000 prometheus
RUN adduser --system --uid 10000 --ingroup prometheus --home /var/lib/prometheus prometheus
RUN curl --silent --show-error -L https://github.com/prometheus/prometheus/releases/download/v${VERSION}/prometheus-${VERSION}.linux-amd64.tar.gz | \
RUN curl -fsSL https://github.com/prometheus/prometheus/releases/download/v${VERSION}/prometheus-${VERSION}.linux-amd64.tar.gz | \
tar -C /opt --no-same-owner -xvzf - && \
mv /opt/prometheus-${VERSION}.linux-amd64 /opt/prometheus && \
mv /opt/prometheus/promtool /bin/promtool && \
mv /opt/prometheus/prometheus /bin/prometheus
ARG NODE_EXPORTER_VERSION=1.7.0 # renovate: datasource=github-releases depName=prometheus/node_exporter
RUN curl --silent --show-error -L https://github.com/prometheus/node_exporter/releases/download/v${NODE_EXPORTER_VERSION}/node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64.tar.gz | \
RUN curl -fsSL https://github.com/prometheus/node_exporter/releases/download/v${NODE_EXPORTER_VERSION}/node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64.tar.gz | \
tar -C /tmp --no-same-owner -xvzf - node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64/node_exporter && \
mv /tmp/node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64/node_exporter /bin/node_exporter && \
rmdir /tmp/node_exporter-${NODE_EXPORTER_VERSION}.linux-amd64