From: W. Trevor King <wking@tremily.us>
Date: Wed, 18 Jun 2014 19:03:52 +0000 (-0700)
Subject: gentoo-portage/Dockerfile.template: Remove 'emerge --sync' call
X-Git-Url: http://git.tremily.us/?a=commitdiff_plain;h=a616a245190a899890a514ad2912e128933387b3;p=dockerfile.git

gentoo-portage/Dockerfile.template: Remove 'emerge --sync' call

specing points out that the rsync behind 'emerge --sync' is vulnerable
to man-in-the-middle attacks.  In any event, it's probably more
reproducible to stick to the daily snapshot releases used by webrsync
and ignore any changes that have since landed in the rsync mirrors.
---

diff --git a/gentoo-portage/Dockerfile.template b/gentoo-portage/Dockerfile.template
index cc1df4d..5f0f3e1 100644
--- a/gentoo-portage/Dockerfile.template
+++ b/gentoo-portage/Dockerfile.template
@@ -30,5 +30,4 @@ RUN echo 'GENTOO_MIRRORS="http://distfiles.gentoo.org/"' >> /etc/portage/make.co
 RUN mkdir -p /usr/portage
 RUN chown -R portage:portage /usr/portage
 RUN emerge-webrsync
-RUN emerge --sync --quiet
 RUN eselect news read new