infra
infra copied to clipboard
Infrastructure configuration for pyca projects (mostly dockerfiles)
registry.access.redhat.com/ubi9/ubi gives us a RHEL9.x base image if we want to build one. If we do that, do we drop FIPS testing on CentOS 9 stream?
Optimize Dockerfile: - Reduce layers - Remove build dependencies
I noticed that the Dockerfile here does not verify the integrity of the rustup installer: https://github.com/pyca/infra/blob/1383f9c10f0749c4c7ed33265ad8558ed30384f4/cryptography-linux/Dockerfile#L34 This contrasts with the bootstrapping for openssl and nodejs, which do verify by checksum:...
do not merge until we're ready for 47.0.0