-
Notifications
You must be signed in to change notification settings - Fork 79
Switch to using the provided binaries instead of building everything from source #84
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
I might be able to help with this one. What I would do:
You lose the verification of the sha checksums for the executables. Checksums are published next to each build on github, but if you fake the DNS entry for https://github.com while building these checksums are useless. |
@smainz I don't quite get your argument concerning the checksums. My approach would be to hardcode the checksums for the latest version in the Dockerfile (as variables) so you can verify the downloaded binaries using those values. I think that would be worthwhile, in order to be sure the image – wherever and whenever it is built – contains the same correct binaries you initially intended to use. |
implemented in #86 |
I see your point. This means, we have to provide the checksms for each architecture in the Dockerfile, as these are different for the different executables. |
Yes, but I think it would be worth doing that (for the 3 architectures we support). |
I will add that later today. |
Fixed in #86 |
Restic as well as Rclone provide binaries for all supported platforms.
The text was updated successfully, but these errors were encountered: