commit aeafa57e0939db2134959b28b05a6275bb21ce10
author moritzraho <raho.mr@gmail.com> Fri Oct 19 19:34:03 2018 +0200
committer Jason Peterson <jasonpet@us.ibm.com> Fri Oct 19 13:34:03 2018 -0400
tree 93484f8d66be7c3fb9a3b67da324d12eade31dd5
parent 2193ee38c211dbafcd9fadc20cff0329e95f98c6

added checksum verification for https://deb.nodesource.com/setup_8.x (#164)

* added checksum verification for https://deb.nodesource.com/setup_8.x

* two spaces for sha256sum

Dockerfile

diff --git a/Dockerfile b/Dockerfile
index f823a5f..94e8cbf 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,7 @@
 FROM ubuntu:14.04
 
 ENV DEBIAN_FRONTEND noninteractive
+ENV NODE_SETUP_DOWNLOAD_SHA 30084249bdd56119cb61be682a56829a11a4c94e21c5d005d326dedb66776104
 
 # Initial update and some basics.
 # This odd double update seems necessary to get curl to download without 404 errors.
@@ -10,7 +11,10 @@
   apt-get install -y curl && \
   apt-get update && \
   apt-get remove -y nodejs && \
-  curl -sL https://deb.nodesource.com/setup_8.x | bash - && \
+  curl -sL https://deb.nodesource.com/setup_8.x -o setup_8.x && \ 
+  echo "${NODE_SETUP_DOWNLOAD_SHA}  setup_8.x" | sha256sum -c - && \
+  cat setup_8.x | bash - && \
+  rm setup_8.x && \
   apt-get install -y nodejs
 
 # only package.json