rpm key stuff

Dockerfile

@@ -48,6 +48,7 @@ RUN chown appuser:appuser -R /usr/logs
 
 # Copy required RPMs
 COPY *.rpm /tmp/
+COPY archive.key /tmp/
 
 ########################################
 # confluentinc/kafka-images/server
@@ -66,7 +67,8 @@ ENV CUB_CLASSPATH='"/usr/share/java/cp-base-new/*"'
 EXPOSE 9092
 
 RUN echo "===> Installing ${COMPONENT}" \
-    && dnf install --nogpgcheck -y /tmp/confluent-common-${RPM_VERSION}.noarch.rpm \
+    && rpm --import /tmp/archive.key \
+    && dnf install -y /tmp/confluent-common-${RPM_VERSION}.noarch.rpm \
         /tmp/confluent-rest-utils-${RPM_VERSION}.noarch.rpm \
         /tmp/confluent-metadata-service-${RPM_VERSION}.noarch.rpm \
         /tmp/confluent-server-${RPM_VERSION}.noarch.rpm \

hardening_manifest.yaml

@@ -217,6 +217,11 @@ resources:
   validation:
     type: sha256
     value: 7e2622a934f04a2e5b23a355f920473ccf0144e946b433bc619a9802c1e3785c
+- filename: archive.key
+  url: https://packages.confluent.io/rpm/6.1/archive.key
+  validation:
+    type: sha256
+    value: b569e9d80bc08b65d342491f8b94e47eb7032701ce17b091f212e1072672a4d5
 - filename: confluent-common-6.1.1-1.noarch.rpm
   url: https://packages.confluent.io/rpm/6.1/confluent-common-6.1.1-1.noarch.rpm
   validation:

scripts/importArtifacts.sh

@@ -24,9 +24,6 @@ importArtifacts() {
     echo -e "\nImporting ${httpdomain} artifacts ..."
 
     maniDir=$(dirname "$manifestPath")
-    if [[ ! -f "$maniDir/build-image.sh" ]]; then
-        cp build-image.sh $maniDir/
-    fi
 
     # (re)set the filelist.txt
     mkdir -p $resourceDir