search

guardianproject / cacert

A slightly more vetted version of the Android CACert keystore
https://guardianproject.info
73 stars 31 forks source link

Add list of required deps to run this project & Containerfile to run it #16

Open emanuelb opened 3 years ago

emanuelb commented 3 years ago

I wrote the below Containerfile to use this project: The list of deps to run this project are: git make ca-certificates gnupg python2 openjdk-17-jre-headless (openjdk is for keytool)

build with podman build --rm -t cacertoolguardian -f CaCertGuardionTool

CaCertGuardionTool content:

FROM docker.io/debian:sid-slim

RUN set -ex; \
    mkdir -p /usr/share/man/man1/; \
    apt-get update; \
    DEBIAN_FRONTEND=noninteractive apt-get install --yes -o APT::Install-Suggests=false --no-install-recommends git make ca-certificates gnupg python2 openjdk-17-jre-headless; \
    ln -s /usr/bin/python2 /usr/bin/python; \
    rm -rf /var/lib/apt/lists/*; \
    useradd -ms /bin/bash appuser; 

USER appuser
RUN set -ex; \
    cd /home/appuser/; \
    gpg --keyserver keyring.debian.org --recv-keys A278B781FE4B2BDA; \
    git clone --depth 1 https://github.com/guardianproject/cacert; \
    cd cacert; \
    sed -i 's/git:\/\/anonscm.debian.org\/git\/collab-maint\/ca-certificates.git/https:\/\/salsa.debian.org\/debian\/ca-certificates.git/g' .gitmodules; \
    git submodule update --init --recursive; \
    make

WORKDIR /home/appuser/