From: W. Trevor King Date: Wed, 18 Jun 2014 19:03:52 +0000 (-0700) Subject: gentoo-portage/Dockerfile.template: Remove 'emerge --sync' call X-Git-Url: http://git.tremily.us/?p=dockerfile.git;a=commitdiff_plain;h=a616a245190a899890a514ad2912e128933387b3 gentoo-portage/Dockerfile.template: Remove 'emerge --sync' call specing points out that the rsync behind 'emerge --sync' is vulnerable to man-in-the-middle attacks. In any event, it's probably more reproducible to stick to the daily snapshot releases used by webrsync and ignore any changes that have since landed in the rsync mirrors. --- diff --git a/gentoo-portage/Dockerfile.template b/gentoo-portage/Dockerfile.template index cc1df4d..5f0f3e1 100644 --- a/gentoo-portage/Dockerfile.template +++ b/gentoo-portage/Dockerfile.template @@ -30,5 +30,4 @@ RUN echo 'GENTOO_MIRRORS="http://distfiles.gentoo.org/"' >> /etc/portage/make.co RUN mkdir -p /usr/portage RUN chown -R portage:portage /usr/portage RUN emerge-webrsync -RUN emerge --sync --quiet RUN eselect news read new