@@ -14,22 +14,22 @@ RUN apt update \
14
14
gnupg \
15
15
&& apt clean && rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
16
16
17
- ARG VERSION=0.21.1
17
+ ARG VERSION=22.0
18
18
ARG ARCH=x86_64
19
- ARG BITCOIN_CORE_SIGNATURE=01EA5486DE18A882D4C2684590C8019E36C2E964
19
+ ARG BITCOIN_CORE_SIGNATURE=71A3B16735405025D447E8F274810B012346C9A6
20
20
21
21
# Don't use base image's bitcoin package for a few reasons:
22
22
# 1. Would need to use ppa/latest repo for the latest release.
23
23
# 2. Some package generates /etc/bitcoin.conf on install and that's dangerous to bake in with Docker Hub.
24
24
# 3. Verifying pkg signature from main website should inspire confidence and reduce chance of surprises.
25
25
# Instead fetch, verify, and extract to Docker image
26
26
RUN cd /tmp \
27
- && wget https://bitcoincore.org/bin/bitcoin-core-${VERSION}/SHA256SUMS.asc \
28
27
&& gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys ${BITCOIN_CORE_SIGNATURE} \
29
- && gpg --verify SHA256SUMS.asc \
30
- && grep bitcoin-${VERSION}-${ARCH}-linux-gnu.tar.gz SHA256SUMS.asc > SHA25SUM \
31
- && wget https://bitcoincore.org/bin/bitcoin-core-${VERSION}/bitcoin-${VERSION}-${ARCH}-linux-gnu.tar.gz \
32
- && sha256sum -c SHA25SUM \
28
+ && wget https://bitcoincore.org/bin/bitcoin-core-${VERSION}/SHA256SUMS.asc \
29
+ https://bitcoincore.org/bin/bitcoin-core-${VERSION}/SHA256SUMS \
30
+ https://bitcoincore.org/bin/bitcoin-core-${VERSION}/bitcoin-${VERSION}-${ARCH}-linux-gnu.tar.gz \
31
+ && gpg --verify --status-fd 1 --verify SHA256SUMS.asc SHA256SUMS 2>/dev/null | grep "^\[ GNUPG:\] VALIDSIG.*${BITCOIN_CORE_SIGNATURE}\$ " \
32
+ && sha256sum --ignore-missing --check SHA256SUMS \
33
33
&& tar -xzvf bitcoin-${VERSION}-${ARCH}-linux-gnu.tar.gz -C /opt \
34
34
&& ln -sv bitcoin-${VERSION} /opt/bitcoin \
35
35
&& /opt/bitcoin/bin/test_bitcoin --show_progress \
0 commit comments