Route LDAP plugin through artifactapi remote for secure image builds.
ci/woodpecker/pr/build Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
Replace direct repo.jellyfin.org download with artifactapi.k8s.syd1.au.unkin.net remote. SHA256 pin guarantees integrity over HTTP. Both plugins now consistent in sourcing from artifactapi infrastructure.
This commit is contained in:
+4
-3
@@ -35,10 +35,11 @@ RUN apt-get update \
|
|||||||
&& apt-get install -y --no-install-recommends curl ca-certificates unzip \
|
&& apt-get install -y --no-install-recommends curl ca-certificates unzip \
|
||||||
&& rm -rf /var/lib/apt/lists/*
|
&& rm -rf /var/lib/apt/lists/*
|
||||||
|
|
||||||
ARG LDAP_URL=https://repo.jellyfin.org/files/plugin/ldap-authentication/ldap-authentication_22.0.0.0.zip
|
ARG LDAP_URL=http://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/jellyfin/files/plugin/ldap-authentication/ldap-authentication_22.0.0.0.zip
|
||||||
ARG LDAP_SHA256=c2386c001be439c9946280a02d62610f29e325d4094e83bd31221de3f7aa20ae
|
ARG LDAP_SHA256=c2386c001be439c9946280a02d62610f29e325d4094e83bd31221de3f7aa20ae
|
||||||
# SSO is served through the artifactapi github proxy, which the CI build network
|
# LDAP is served through artifactapi remote. SSO is served through the artifactapi
|
||||||
# can reach (github is not directly reachable). SSO_SHA256 pins the exact bytes.
|
# github proxy, which the CI build network can reach (github is not directly reachable).
|
||||||
|
# SHA256 pins match each release's published asset for reproducibility and integrity.
|
||||||
ARG SSO_URL=http://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/9p4/jellyfin-plugin-sso/releases/download/v4.0.0.4/sso-authentication_4.0.0.4.zip
|
ARG SSO_URL=http://artifactapi.k8s.syd1.au.unkin.net/api/v1/remote/github/9p4/jellyfin-plugin-sso/releases/download/v4.0.0.4/sso-authentication_4.0.0.4.zip
|
||||||
ARG SSO_SHA256=c09f16ba31059a434ddd7f811e4f9608d4b4c4514cc80a5bf1ca33bee61e1107
|
ARG SSO_SHA256=c09f16ba31059a434ddd7f811e4f9608d4b4c4514cc80a5bf1ca33bee61e1107
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user