mirror of
https://github.com/anchore/syft.git
synced 2026-10-31 14:36:33 +01:00
Alex Goodman
9e520d1442
`archive.ubuntu.com/ubuntu/pool/main` only keeps the current version of a package, so the pinned `zlib1g 1:1.3.dfsg-3.1ubuntu2.1` URL started 404ing. `curl` without `-f` wrote the error page into `zlib1g.deb` and exited 0, so the fixture image built clean and just contained a non-deb, failing `TestDpkgArchiveCataloger` only when the fixture cache was cold. Now points at the launchpad `+files` URL, which is immutable. Also added `-f` to the other fixture Dockerfiles that curl a pinned artifact so the next bit of URL rot fails the build instead of quietly poisoning a fixture. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>
35 lines
1.6 KiB
Docker
35 lines
1.6 KiB
Docker
FROM fedora:37@sha256:3f987b7657e944cf87a129cc262982d4f80e38bd98f7db313ccaf90ca7069dd2
|
|
|
|
RUN dnf install 'dnf-command(download)' cpio unzip xz -y
|
|
# https://dl.fedoraproject.org/pub/fedora/linux/releases/37/Everything/x86_64/os/Packages/k/kernel-6.0.7-301.fc37.x86_64.rpm
|
|
# https://dl.fedoraproject.org/pub/fedora/linux/releases/37/Everything/x86_64/os/Packages/k/kernel-modules-6.0.7-301.fc37.x86_64.rpm
|
|
RUN dnf download kernel-core-6.0.7-301.fc37 kernel-modules-6.0.7-301.fc37 -y
|
|
|
|
RUN rpm2cpio kernel-core-*.rpm | cpio -t && \
|
|
rpm2cpio kernel-core-*.rpm | cpio -idmv ./lib/modules/6.0.7-301.fc37.x86_64/vmlinuz
|
|
|
|
RUN rpm2cpio kernel-modules-*.rpm | cpio -t && \
|
|
rpm2cpio kernel-modules-*.rpm | cpio -idmv ./lib/modules/6.0.7-301.fc37.x86_64/kernel/drivers/tty/ttynull.ko.xz
|
|
|
|
RUN unxz /lib/modules/6.0.7-301.fc37.x86_64/kernel/drivers/tty/ttynull.ko.xz
|
|
|
|
# dotnet pkg coverage
|
|
# https://nuget.info/packages/DocuSign.eSign.dll/6.8.0
|
|
# https://github.com/docusign/docusign-esign-csharp-client/blob/master/LICENSE
|
|
RUN curl -fLO https://www.nuget.org/api/v2/package/DocuSign.eSign.dll/6.8.0
|
|
RUN unzip 6.8.0
|
|
RUN chmod 600 lib/net462/DocuSign.eSign.dll
|
|
RUN rm 6.8.0
|
|
|
|
FROM scratch
|
|
|
|
COPY --from=0 lib/net462/DocuSign.eSign.dll .
|
|
COPY --from=0 /lib/modules/6.0.7-301.fc37.x86_64/vmlinuz /lib/modules/6.0.7-301.fc37.x86_64/vmlinuz
|
|
COPY --from=0 /lib/modules/6.0.7-301.fc37.x86_64/kernel/drivers/tty/ttynull.ko /lib/modules/6.0.7-301.fc37.x86_64/kernel/drivers/tty/ttynull.ko
|
|
|
|
|
|
COPY pkgs/ .
|
|
# we duplicate to show a package count difference between all-layers and squashed scopes
|
|
COPY lib lib
|
|
COPY etc/ .
|