view contrib/packaging/docker/centos5 @ 41457:6c10eba6b9cd stable

subrepo: prohibit variable expansion on creation of hg subrepo (SEC)

It's probably wrong to expand path at localrepo.*repository() layer, but
fixing the layering issue would require careful inspection of call paths.
So, this patch adds add a validation to the subrepo constructor.

os.path.realpath(util.expandpath(root)) is what vfsmod.vfs() would do.

FROM centos:centos5

RUN groupadd -g %GID% build && \
    useradd -u %UID% -g %GID% -s /bin/bash -d /build -m build

RUN \
	sed -i 's/^mirrorlist/#mirrorlist/' /etc/yum.repos.d/*.repo && \
	sed -i 's/^#\(baseurl=\)http:\/\/mirror.centos.org\/centos/\1http:\/\/vault.centos.org/' /etc/yum.repos.d/*.repo && \
	sed -i 's/\$releasever/5.11/' /etc/yum.repos.d/*.repo

RUN yum install -y \
	gcc \
	gettext \
	make \
	python-devel \
	python-docutils \
	rpm-build \
	tar

# For creating repo meta data
RUN yum install -y \
	bzip2-devel \
	createrepo \
	ncurses-devel \
	openssl-devel \
	readline-devel \
	zlib-devel