[
https://issues.apache.org/jira/browse/SOLR-16748?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Houston Putman resolved SOLR-16748.
-----------------------------------
Fix Version/s: 9.3
Assignee: Houston Putman
Resolution: Fixed
The customization of the official Dockerfile has been reduced to just
SOLR_DOWNLOAD_SERVER, which requires the tgzs be available at
<server>/${SOLR_VERSION}/solr-${SOLR_VERSION}(-slim).tgz(.asc)
If the server URL contains "apache.org", then the GPG signatures will be
checked. Otherwise the GPG signature check will be skipped.
> Cleanup GPG/SHA checking in official docker file
> ------------------------------------------------
>
> Key: SOLR-16748
> URL: https://issues.apache.org/jira/browse/SOLR-16748
> Project: Solr
> Issue Type: Improvement
> Components: Docker
> Reporter: Houston Putman
> Assignee: Houston Putman
> Priority: Major
> Fix For: 9.3
>
> Time Spent: 1.5h
> Remaining Estimate: 0h
>
> The logic here hasn't been updated in a while.
> If the GPG check is skipped (if a custom solr download url is used), it also
> skips the SHA check. This probably should be the case, since whoever
> generates the official dockerfiles should also be generating the artifacts
> (which includes the SHA).
> Also GPG setup is done even if the GPG check is skipped, so that logic might
> as well be moved down with the actual check.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
