Merge pull request #18 from jstuder-gh/update_security

Update security of Dockerfile

Dockerfile

@@ -12,19 +12,29 @@ RUN buildDeps=' \
         libencode-perl \
         make \
     ' \
+    url="https://rakudo.org/downloads/star/rakudo-star-${rakudo_version}.tar.gz" \
+    keyserver='ha.pool.sks-keyservers.net' \
+    keyfp='ECF8B611205B447E091246AF959E3D6197190DD5' \
+    tmpdir="$(mktemp -d)" \
     && set -x \
+    && export GNUPGHOME="$tmpdir" \
     && apt-get update \
     && apt-get --yes install --no-install-recommends $buildDeps \
     && rm -rf /var/lib/apt/lists/* \
-    && mkdir /root/rakudo \
-    && curl -fsSL http://rakudo.org/downloads/star/rakudo-star-${rakudo_version}.tar.gz -o rakudo.tar.gz \
-    && tar xzf rakudo.tar.gz --strip-components=1 -C /root/rakudo \
+    && mkdir ${tmpdir}/rakudo \
+    \
+    && curl -fsSL ${url}.asc -o ${tmpdir}/rakudo.tar.gz.asc \
+    && curl -fsSL $url -o ${tmpdir}/rakudo.tar.gz \
+    && gpg --keyserver $keyserver --recv-keys $keyfp \
+    && gpg --batch --verify ${tmpdir}/rakudo.tar.gz.asc ${tmpdir}/rakudo.tar.gz \
+    \
+    && tar xzf ${tmpdir}/rakudo.tar.gz --strip-components=1 -C ${tmpdir}/rakudo \
     && ( \
-        cd /root/rakudo \
+        cd ${tmpdir}/rakudo \
         && perl Configure.pl --prefix=/usr --gen-moar \
         && make install \
     ) \
-    && rm -rf /rakudo.tar.gz /root/rakudo \
+    && rm -rf $tmpdir \
     && apt-get purge -y --auto-remove $buildDeps
 
 ENV PATH=$PATH:/usr/share/perl6/site/bin