Commits on Aug 9, 2018

1. Store all intermediate files in temp dir …

   Makes for easy cleanup.

   

   jstuder-gh committed Aug 9, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 048e15a
   • Browse repository at this point

   Copy the full SHA

   048e15a View commit details

   Browse the repository at this point in the history

2. Upgrade security of Dockerfile …

   * Use https to retrieve archive from Rakudo server
   * Retrieve PGP signature from Rakudo server (https)
   * Retrieve PGP public key over hkps and using full fingerprint
   * Verify archive using signature (explicitly with gpg2)

   

   jstuder-gh committed Aug 9, 2018
   4 Configuration menu

   • View commit details
   • Copy full SHA for 33cba95
   • Browse repository at this point

   Copy the full SHA

   33cba95 View commit details

   Browse the repository at this point in the history

3. Use "High Availabilty" Keyserver Pool …

   Use the 'ha' keyserver pool as...
     * GPG already provides strong guaranty when using a full fingerprint
     * Using hkps reduces reliability enhancements Docker provides for
       official images
   Thanks to tianon++ for the review.
   See [here](https://github.com/perl6/docker/pull/18/files#r208803260)
   for more details.

   

   jstuder-gh committed Aug 9, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 91de061
   • Browse repository at this point

   Copy the full SHA

   91de061 View commit details

   Browse the repository at this point in the history

4. Use 'gpg' as opposed to explicit 'gpg2' …

   Travis was failing due to being unable to find 'gpg2' and gpg is already
   an alias for gpg2 in the base image. Thanks to zakame++ for
   verification.

   

   jstuder-gh committed Aug 9, 2018
   Configuration menu

   • View commit details
   • Copy full SHA for 944167b
   • Browse repository at this point

   Copy the full SHA

   944167b View commit details

   Browse the repository at this point in the history