search

moparisthebest / static-curl

fully static builds of curl, runs anywhere
https://code.moparisthebest.com/moparisthebest/static-curl
MIT License
497 stars 30 forks source link

Unable to verify gpg signature #9

Open omars44 opened 1 year ago

omars44 commented 1 year ago

I'm trying to download the latest curl on a debian 11 docker base image with the following, and unable to verify with the following error: any ideas?

#0 9.767 gpg: directory '/root/.gnupg' created
#0 9.768 gpg: keybox '/root/.gnupg/pubring.kbx' created
#0 11.19 gpg: keyserver receive failed: No data

Dockerfile

# Install required packages and download the latest version of curl and its signature
RUN apt-get update && \
    apt-get install -y gnupg && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/curl-amd64 -o /usr/local/bin/curl && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/sha256sum.txt -o sha256sum.txt && \
    curl https://github.com/moparisthebest/static-curl/releases/download/v8.0.1/sha256sum.txt.asc -o sha256sum.txt.asc && \
    gpg --keyserver hkps://keys.openpgp.org --recv-keys 7D21F91B8D5E1C63 && \
    gpg --verify sha256sum.txt.asc sha256sum.txt && \
    sha256sum -c --ignore-missing sha256sum.txt && \
    chmod +x /usr/local/bin/curl && \
    apt-get remove -y gnupg && \
    apt-get -y autoremove && \
    apt-get clean && \
    rm -rf /var/lib/apt/lists/*