From 34f172d65aa84e2dc2109d7038f4a2cb918bbe5c Mon Sep 17 00:00:00 2001 From: Sven-Hendrik Haase Date: Fri, 23 Oct 2020 04:10:36 +0200 Subject: [PATCH] Add big block of documentation to Dockerfile --- Dockerfile.template | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/Dockerfile.template b/Dockerfile.template index 9d67451..6ccf941 100644 --- a/Dockerfile.template +++ b/Dockerfile.template @@ -1,3 +1,13 @@ +# We're using a multistage Docker build here in order to allow us to release a self-verifying +# Docker image when built on the official Docker infrastructure. +# They require us to verify the source integrity in some way while making sure that this is a +# reproducible build. +# See https://github.com/docker-library/official-images#image-build +# In order to achieve this, we externally host the rootfs archives and their checksums and then +# just download and verify it in the first stage of this Dockerfile. +# The second stage is for actually configuring the system a little bit. +# Some templating is done in order to allow us to easily build different configurations and to +# allow us to automate the releaes process. FROM archlinux:latest AS verify COPY TEMPLATE_ROOTFS_FILE / SHELL ["/bin/bash", "-c"]