Felix Singer submitted this change.

View Change


Approvals: build bot (Jenkins): Verified Felix Singer: Looks good to me, approved Angel Pons: Looks good to me, approved
manibuilder/centos: Disable TLS verification for Git commands

Pull the `ca-certificates` package but also disable certificate
verification for Git commands, including those that run during
tests. At some point, the `ca-certificates` won't get updates
anymore and, ideally, existing docker images will keep working.

Change-Id: I6bc2a85c67b84e89656fe5d7191d354c2f97ff05
Signed-off-by: Nico Huber <nico.h@gmx.de>
Reviewed-on: https://review.coreboot.org/c/flashrom/+/66982
Reviewed-by: Angel Pons <th3fanbus@gmail.com>
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Felix Singer <felixsinger@posteo.net>
---
M util/manibuilder/Dockerfile.centos
1 file changed, 22 insertions(+), 1 deletion(-)

diff --git a/util/manibuilder/Dockerfile.centos b/util/manibuilder/Dockerfile.centos
index fcae9c8..16ea921 100644
--- a/util/manibuilder/Dockerfile.centos
+++ b/util/manibuilder/Dockerfile.centos
@@ -2,9 +2,11 @@

RUN \
useradd -p locked -m mani && \
- yum install -q -y git gcc pciutils-devel libusb-devel libusbx-devel && \
+ yum install -q -y ca-certificates git gcc \
+ pciutils-devel libusb-devel libusbx-devel && \
yum clean -q -y all

+ENV GIT_SSL_NO_VERIFY=1
USER mani
RUN \
cd && \

To view, visit change 66982. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-Project: flashrom
Gerrit-Branch: master
Gerrit-Change-Id: I6bc2a85c67b84e89656fe5d7191d354c2f97ff05
Gerrit-Change-Number: 66982
Gerrit-PatchSet: 4
Gerrit-Owner: Nico Huber <nico.h@gmx.de>
Gerrit-Reviewer: Angel Pons <th3fanbus@gmail.com>
Gerrit-Reviewer: Felix Singer <felixsinger@posteo.net>
Gerrit-Reviewer: Thomas Heijligen <src@posteo.de>
Gerrit-Reviewer: build bot (Jenkins) <no-reply@coreboot.org>
Gerrit-MessageType: merged