11FROM alpine:3.21
22
3- ENV NODE_VERSION 20.19.0
3+ ENV NODE_VERSION= 20.19.5
44
55RUN addgroup -g 1000 node \
66 && adduser -u 1000 -G node -s /bin/sh -D node \
@@ -10,7 +10,7 @@ RUN addgroup -g 1000 node \
1010 curl \
1111 && ARCH= OPENSSL_ARCH='linux*' && alpineArch="$(apk --print-arch)" \
1212 && case "${alpineArch##*-}" in \
13- x86_64) ARCH='x64' CHECKSUM="b2a58593a9de31ca444fe095cb2db0674bdccab426ee6803110ca17867bdac26 " OPENSSL_ARCH=linux-x86_64;; \
13+ x86_64) ARCH='x64' CHECKSUM="3ea6ae2833f2d75e4d84731a9c01f50eff5198d78f724fa673281468e1c2077b " OPENSSL_ARCH=linux-x86_64;; \
1414 x86) OPENSSL_ARCH=linux-elf;; \
1515 aarch64) OPENSSL_ARCH=linux-aarch64;; \
1616 arm*) OPENSSL_ARCH=linux-armv4;; \
@@ -41,7 +41,7 @@ RUN addgroup -g 1000 node \
4141 && export GNUPGHOME="$(mktemp -d)" \
4242 # gpg keys listed at https://github.com/nodejs/node#release-keys
4343 && for key in \
44- C0D6248439F1D5604AAFFB4021D900FFDB233756 \
44+ 5BE8A3F6C8A5C01D106C0AD820B1A390B168D356 \
4545 DD792F5973C6DE52C432CBDAC77ABFA00DDBF2B7 \
4646 CC68F5A3106FF448322E48ED27F5E38D5B0A215F \
4747 8FCCA13FEF1D0C2E91008E09770F7A9A5AE15600 \
@@ -50,8 +50,8 @@ RUN addgroup -g 1000 node \
5050 108F52B48DB57BB0CC439B2997B01419BD92F80A \
5151 A363A499291CBBC940DD62E41F10027AF002F8B0 \
5252 ; do \
53- gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
54- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; \
53+ { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key" ; } || \
54+ { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key" ; } ; \
5555 done \
5656 && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/node-v$NODE_VERSION.tar.xz" \
5757 && curl -fsSLO --compressed "https://nodejs.org/dist/v$NODE_VERSION/SHASUMS256.txt.asc" \
@@ -75,18 +75,19 @@ RUN addgroup -g 1000 node \
7575 && apk del .build-deps \
7676 # smoke tests
7777 && node --version \
78- && npm --version
78+ && npm --version \
79+ && rm -rf /tmp/*
7980
80- ENV YARN_VERSION 1.22.22
81+ ENV YARN_VERSION= 1.22.22
8182
8283RUN apk add --no-cache --virtual .build-deps-yarn curl gnupg tar \
8384 # use pre-existing gpg directory, see https://github.com/nodejs/docker-node/pull/1895#issuecomment-1550389150
8485 && export GNUPGHOME="$(mktemp -d)" \
8586 && for key in \
8687 6A010C5166006599AA17F08146C2130DFD2497F5 \
8788 ; do \
88- gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" || \
89- gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" ; \
89+ { gpg --batch --keyserver hkps://keys.openpgp.org --recv-keys "$key" && gpg --batch --fingerprint "$key" ; } || \
90+ { gpg --batch --keyserver keyserver.ubuntu.com --recv-keys "$key" && gpg --batch --fingerprint "$key" ; } ; \
9091 done \
9192 && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz" \
9293 && curl -fsSLO --compressed "https://yarnpkg.com/downloads/$YARN_VERSION/yarn-v$YARN_VERSION.tar.gz.asc" \
0 commit comments