From e8e2eb6e59f9351919eec9903d6ed5dd43c27826 Mon Sep 17 00:00:00 2001
From: Stefan Pietsch <mail.ipv4v6+gh@gmail.com>
Date: Tue, 30 May 2017 23:54:01 +0200
Subject: [PATCH] check hash sums of downloaded files

Signed-off-by: Stefan Pietsch <mail.ipv4v6+gh@gmail.com>
---
 Dockerfile | 23 ++++++++++++++++++-----
 1 file changed, 18 insertions(+), 5 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index a03e15106..154d51510 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,34 +19,47 @@ RUN set -ex; \
 
 RUN curl https://get.docker.com/builds/Linux/x86_64/docker-1.8.3 \
         -o /usr/local/bin/docker && \
+    SHA256=f024bc65c45a3778cf07213d26016075e8172de8f6e4b5702bedde06c241650f; \
+    echo "${SHA256}  /usr/local/bin/docker" | sha256sum -c - && \
     chmod +x /usr/local/bin/docker
 
 # Build Python 2.7.13 from source
 RUN set -ex; \
-    curl -L https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz | tar -xz; \
+    curl -LO https://www.python.org/ftp/python/2.7.13/Python-2.7.13.tgz && \
+    SHA256=a4f05a0720ce0fd92626f0278b6b433eee9a6173ddf2bced7957dfb599a5ece1; \
+    echo "${SHA256}  Python-2.7.13.tgz" | sha256sum -c - && \
+    tar -xzf Python-2.7.13.tgz; \
     cd Python-2.7.13; \
     ./configure --enable-shared; \
     make; \
     make install; \
     cd ..; \
-    rm -rf /Python-2.7.13
+    rm -rf /Python-2.7.13; \
+    rm Python-2.7.13.tgz
 
 # Build python 3.4 from source
 RUN set -ex; \
-    curl -L https://www.python.org/ftp/python/3.4.6/Python-3.4.6.tgz | tar -xz; \
+    curl -LO https://www.python.org/ftp/python/3.4.6/Python-3.4.6.tgz && \
+    SHA256=fe59daced99549d1d452727c050ae486169e9716a890cffb0d468b376d916b48; \
+    echo "${SHA256}  Python-3.4.6.tgz" | sha256sum -c - && \
+    tar -xzf Python-3.4.6.tgz; \
     cd Python-3.4.6; \
     ./configure --enable-shared; \
     make; \
     make install; \
     cd ..; \
-    rm -rf /Python-3.4.6
+    rm -rf /Python-3.4.6; \
+    rm Python-3.4.6.tgz
 
 # Make libpython findable
 ENV LD_LIBRARY_PATH /usr/local/lib
 
 # Install pip
 RUN set -ex; \
-    curl -L https://bootstrap.pypa.io/get-pip.py | python
+    curl -LO https://bootstrap.pypa.io/get-pip.py && \
+    SHA256=19dae841a150c86e2a09d475b5eb0602861f2a5b7761ec268049a662dbd2bd0c; \
+    echo "${SHA256}  get-pip.py" | sha256sum -c - && \
+    python get-pip.py
 
 # Python3 requires a valid locale
 RUN echo "en_US.UTF-8 UTF-8" > /etc/locale.gen && locale-gen