add consul checksum for download verification

teutat3s · Feb 3, 2020 · bfccf2b · bfccf2b
1 parent 6a943ab
commit bfccf2b
Showing 1 changed file with 10 additions and 3 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -4,9 +4,16 @@ ENV CONSUL_VERSION=1.6.3
 
 RUN  apt-get update \
      && apt-get install -y unzip \
-     && go get golang.org/x/lint/golint \
-     && curl --fail -Lso consul.zip "https://releases.hashicorp.com/consul/${CONSUL_VERSION}/consul_${CONSUL_VERSION}_linux_amd64.zip" \
-     && unzip consul.zip -d /usr/bin
+     && go get golang.org/x/lint/golint
+
+RUN export CONSUL_CHECKSUM=3ada92a7b49c11076d0a2db9db4ad53ee366fcfb0e057118a322ad0daf188c60 \
+    && export archive=consul_${CONSUL_VERSION}_linux_amd64.zip \
+    && curl -Lso /tmp/${archive} https://releases.hashicorp.com/consul/${CONSUL_VERSION}/${archive} \
+    && echo "${CONSUL_CHECKSUM}  /tmp/${archive}" | sha256sum -c \
+    && cd /bin \
+    && unzip /tmp/${archive} \
+    && chmod +x /bin/consul \
+    && rm /tmp/${archive}
 
 ENV CGO_ENABLED 0
 ENV GOPATH /go:/cp