diff --git a/Dockerfile.template b/Dockerfile.template index 9d67451..6ccf941 100644 --- a/Dockerfile.template +++ b/Dockerfile.template @@ -1,3 +1,13 @@ +# We're using a multistage Docker build here in order to allow us to release a self-verifying +# Docker image when built on the official Docker infrastructure. +# They require us to verify the source integrity in some way while making sure that this is a +# reproducible build. +# See https://github.com/docker-library/official-images#image-build +# In order to achieve this, we externally host the rootfs archives and their checksums and then +# just download and verify it in the first stage of this Dockerfile. +# The second stage is for actually configuring the system a little bit. +# Some templating is done in order to allow us to easily build different configurations and to +# allow us to automate the releaes process. FROM archlinux:latest AS verify COPY TEMPLATE_ROOTFS_FILE / SHELL ["/bin/bash", "-c"]