Skip to content

Commit 7d7d86f

Browse files
authored
feat: Download platform tools in image (#202)
Every single verifiable build the process has to download platform tools. This isn't coming on stdout and it is slow on dodgy wifi, it can even timeout. this introduces another pointless critical download opening to supply chain attack. Should this be backported to make new images since this does not change the output?
1 parent 610cdc3 commit 7d7d86f

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

generate_dockerfiles.py

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,11 @@
5757
RUN apt-get update && apt-get install -qy git gnutls-bin
5858
RUN sh -c "$(curl -sSfL https://release.anza.xyz/{AGAVE_VERSION_PLACEHOLDER}/install)"
5959
ENV PATH="/root/.local/share/solana/install/active_release/bin:$PATH"
60+
# Call cargo build-sbf to trigger installation of associated platform tools
61+
RUN cargo init temp && \\
62+
cd temp && \\
63+
cargo build-sbf && \\
64+
rm -rf temp
6065
WORKDIR /build
6166
6267
CMD /bin/bash

0 commit comments

Comments
 (0)