Composer Installer auto-version SHA

This commit is contained in:
Quentin DELCOURTE 2018-10-19 19:42:23 +02:00
parent d38f28bd07
commit 20f4bd2fad

View File

@ -2,7 +2,7 @@ FROM php
MAINTAINER Conjecto <contact@conjecto.com> MAINTAINER Conjecto <contact@conjecto.com>
RUN apt-get update && apt-get install -y \ RUN apt-get update && apt-get install -y \
--no-install-recommends git zip zlib1g-dev --no-install-recommends git zip zlib1g-dev wget
RUN docker-php-ext-install -j$(nproc) zip RUN docker-php-ext-install -j$(nproc) zip
@ -11,9 +11,11 @@ WORKDIR /var/app/
# install composer # install composer
RUN php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" RUN php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
RUN php -r "if (hash_file('SHA384', 'composer-setup.php') === '544e09ee996cdf60ece3804abc52599c22b1f40f4323403c44d44fdfdd586475ca9813a858088ffbc1f233e9b180f061') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" RUN \
RUN php composer-setup.php EXPECTED_SIGNATURE=$(wget -q -O - https://composer.github.io/installer.sig) && \
RUN php -r "unlink('composer-setup.php');" php -r "if (hash_file('SHA384', 'composer-setup.php') === '${EXPECTED_SIGNATURE}') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;" && \
php composer-setup.php && \
php -r "unlink('composer-setup.php');"
# install vendors # install vendors
RUN php composer.phar install RUN php composer.phar install