GPG-verify tar ball before using it. This close #23

Dockerfile

@@ -15,13 +15,17 @@ RUN DEBIAN_FRONTEND=noninteractive ;\
     apt-get update && \
     apt-get install -y php5-cli php5-gd php5-pgsql php5-sqlite php5-mysqlnd php5-curl php5-intl php5-mcrypt php5-ldap php5-gmp php5-apcu php5-imagick php5-fpm smbclient nginx wget
 
+ADD misc/owncloud.asc /tmp/owncloud.asc
 ADD https://download.owncloud.org/community/owncloud-8.0.3.tar.bz2 /tmp/oc.tar.bz2
+ADD https://download.owncloud.org/community/owncloud-8.0.3.tar.bz2.asc /tmp/oc.tar.bz2.asc
 RUN mkdir -p /var/www/owncloud /owncloud /var/log/cron && \
+    gpg --import /tmp/owncloud.asc && \
+    gpg --verify /tmp/oc.tar.bz2.asc && \
     tar -C /var/www/ -xf /tmp/oc.tar.bz2 && \
     chown -R www-data:www-data /var/www/owncloud && \
     rm -rf /var/www/owncloud/config && ln -sf /owncloud /var/www/owncloud/config && \
     chmod +x /usr/bin/bootstrap.sh && \
-    rm /tmp/oc.tar.bz2
+    rm /tmp/oc.tar.bz2 /tmp/oc.tar.bz2.asc /tmp/owncloud.asc
 
 ADD configs/php.ini /etc/php5/fpm/
 ADD configs/cron.conf /etc/oc-cron.conf

misc/Makefile

@@ -20,3 +20,12 @@ owncloud:
 
 build:
 	docker build $(BUILD_OPTIONS) --tag $(image_owncloud) ..
+
+.PHONY: verify-gpg-public-keys
+verify-gpg-public-keys: owncloud.asc
+
+## Always renew
+.PHONY: owncloud.asc
+owncloud.asc:
+	wget --output-document "$@" "https://owncloud.org/$@"
+	git diff --exit-code -- owncloud.asc && echo 'OK' || echo 'Not OK'

misc/owncloud.asc

@@ -0,0 +1,52 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v2.0.19 (GNU/Linux)
+
+mQINBFJcGnwBEACREiisqNAOlZhflsGCN+Pf7s/s3YuaXG8rJ4SPp4HdOc5nTLHt
+6naWzj53tODA9mQ8ELe1F3GF3lYl9epR85FWwebZnXV7la0Y0PBNCOYKKzPTgmW9
+U0tsqcRTtNtA6LrbpWqqBaJxTlDr1lX01pvt1pjeHN1bPX6ox/2wbFr4jMrr1sdU
+QYF+/VFdtikeKYJzGqRFjdLqqmFmlBUzzg8ogSUNUmJZkRPSIJadi4QQA63+MaEL
+ik/sczFYAMwOuyQUdh1/rEgbHk9RmD1aMkvGCuXbDXlVpU9HI5bqFxyFoJ925FWq
+WZ4yIwzN+QNUXNQmTh/nw7hsxczD6YVWvvfMa7XovnueeuhmVvM9EcYF0gEotRI0
+b1P1jie9eQXSgJAFgrl7TEHvK5IRLu9iarVfYlpApgHKE8NrYKS5+WRTvrFou2sg
+Q0Fj8nX+xSkfnjIdZJCkTfPsZ48U07jrqT8wBZhVBaChZVBJzyOCnmLTpJdAk0kf
+doXYlJHvVAhl3eGrocrQ8p2cLLaialh07EKjRC/frfRqx7D2LNYrTRd59u8eivLX
+Y3Afl/XmawvD/+80ekKNg04M9tK+jwqjVyNekVuVLrUKU71t6UaAK1cdgyGlFk1T
+QGSv8faQ9tR/LKX8uh4pYFNNZUG3MQW4wZxEq2RJzrP+exlzYXiQPuCSuwARAQAB
+tBxvd25DbG91ZCA8aW5mb0Bvd25jbG91ZC5jb20+iQI+BBMBAgAoBQJSXBp8AhsD
+BQkDwmcABgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRAtXV6X9peKJiQLD/9T
+eX8m8tA/eUtSZIxTjM5tyQ4r+e725nhUnmigyBwoBB6KQVFa0Gv8oI1reyNYqLWe
+LWgWuleVTg8st4FHjNzTOfSjOXTih925ZtPAUcGakFrVFRqTD+U/xjSId2zn4f3T
+XK+ewFTlS1LwiBMhnCPLc+rYeyOLtgbLldFEKjQOBkRola2TLKs2z76Qv3Edage4
+0KxP7832nLEpESXrbQVS7Akqci2mrNwMbyWcUjhqknoEeFMUnMOb2QRwnXkOmcDv
+NDb3By5rHQgc5KIPe8KJAQs4V6++mgmSzyrsvUhy1VbrgpBi4xq0Jrxk3b9RPrnQ
++lTwTDVMMSDjuvJmVv7DNFSEdkU0GNA3+6yXPvfrmjLM8k8yODIo6j6kptKce8/O
+2rKAOV5KBs6pqt/yjZSWISqb9UGR2gwjMn8pJ+uw4+K94jsUUgB7x2m+tBGIz+S7
+vX8LWDnVa0BLOuiRM65lpHqdmmR0XEMYmd/gm5GBlJkD9zlVUEaVc5xaAakWwdrO
+Uer7O40vW+zrAx/g2uFDXvC6onA7AT3dErrtmQlRExOPLOSgJrp2+EXgLYDR21Mk
+wDPOcdxeNO9TtbusXoNQ/FV3rOysbWtNywwNd3UNrmc1mb4v46Zjfw57h/dUog5G
+uWXiW5sHppokZt1fNSsuJLMzCLFbgN7PjPdqgDO2fbkCDQRSXBp8ARAAoa1rFK1k
+KzAwMKFHYL7fW7EtNC74uMukCzOxn8gaNnInq3hLDuHClt+QETBIuit9xvziYW8P
+RzkcVzfy4/Jl6dRvjQDcIpUhb6/+1C68ynIg+75SbextiNVpjuia+2/GPjOVtwHR
+EIaCiNiT3KkQGPgUJB/4vr5iHQAb6nMazIcKBWnmF0Wi4IynfZ/LoCxd7lYGe1PP
+nDCG2XzWaNfHV10UtW5koZwVjfVoyFqiTMrQAcTw8aUEBzdnBRwG8kuKVuHqsuUu
+9+DmOJX3u8Y/uX1UtKxEQQzihJDcNqmyZs5O7mp5T2co0Ar6QpXt2++ikmP8derE
+E0GRiWX0kEQFGRDUbtAq2O7EhmPqgkIT4IcJ9tsgAaDk3O2oJjEvY8J0he7+Xnjz
+2MJVbjO6njl5mlG+Njp/EghbWhO/eA5+DFEsYPeGTRdyhzwx8ZdhjKTn7Iw6yxdg
+X/x4bnAfp2w/zUNK0BLB3W6LSD7ZTOPu1frHy/5bPUWpv7hu3nIJ36H0QLnXM8L0
+pKQZRQlAGGlzrEbcl3UT2EJ74AcysV5KgDxBD6zNAA/WDrxQH0YN+aKtaeJfZ+87
+sT8Sp4jsjNxf1tvGGnuxAceguGQwMke4HKfm1Q4fvQDC7EjLU5IwfoEWK3rBLs4P
+VXNEdEdDOHPj8tEW2HnjJv1n0G9YLFfzvzcAEQEAAYkCJQQYAQIADwUCUlwafAIb
+DAUJA8JnAAAKCRAtXV6X9peKJucaD/4o525Ov1bEXAsOu2HNwC25vpmFz6I0Ph0W
+G2bThEloVOUHVLDa3h20K/C8uYqQ75I9JnJFrxIrt+SzP/n3kv5VeR6YNnnPZD1G
+E4PwutwoGLGYWk4itlq3nyGaJIzayh0xAJt19tX11Zsdmzm/XTeqZnumA61gcUZQ
+WpJsX6q3KrVNI3pneh7d2w25cOh+jsx+ClzFKVIqkYuaetQw+PfYm+pd3HvFtzbo
+DLMZULF8NZS5U/qJVd5D4yj+m/GplHsWRkGl0ce3UZEsg1Uj+5efB01NwKBKFIFI
+1+iB95+HTBXwKULNtJIs0qj5+qPlNsvSAJ2ZRJCjfVvye7jKhOGgCsmPjXhBUVDw
+ie45zXTHqsHsanfJZBKZlkbkmIhVN+HngvEdPfuVWdta+gLEWkKfVKAfltDBKDHn
+kRbSXb0Pj0gGuTok+H4f/nJx4c7YkqgPizBMRZ6I+6KUYI/Z1JqWwvFL7uUdgUsk
+kKE2SJi8yYNl2UrLH4YY02sBzRNcyKb5Ci1w4igip3AN+XCK9GcDFtf2ND7I0TLp
+0CsFatHguf2tR3zrepwByqhO95t4bxUsCpVcay9FdH/G+8cTa93QyhdER8GKDYOV
+znaWZXHy5Qb12Lcu1UUohQty5YsGAv7OuDW4J0jiL8OMcwb6oVez4lJx6v5gW1aF
+zh7+t7Jbzw==
+=sX8A
+-----END PGP PUBLIC KEY BLOCK-----