Embed GPG keys to avoid build flakiness.

Author: psftw

8.8/DEB_KEYS

@@ -0,0 +1,117 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQINBFMsofQBEADeUE5blPMHwapi01I7VSkT3hiXghkySw0Y2QYcwyV+VEaQK7/u
+BRryBxKYppUQWY8E7FJTor0BCQQWeEAKSQjdomSmL9eZcnzeGtbAIjiJkMZMcE0G
+Hedfo6eRUnOCUly7SZIj0PXamWcmzOIhWiYUdfYCy43HKznLBqra/Eqf6+Oj+9oK
+VOVshz2aLTEkChdxZDYlUkjt/JGjo45HgyNyI6UT0fYB41IRheMajpF75WBImUvw
+9Hx37uhrNKU88rDbkD7tVvdyrObuMzL4WgTbS3LGNpaFfl39ZHCZjY9Fu4ZWf7jY
+4pr9nUGF7KfYl6ag5Jr8nVC3AD2LjAaoZxmtPP5GSvQPK5q3QfIRTTMmoN+V0IWZ
+kNbYs3i4Kf+YWPN2YJDnGozvGgG01rduVw2nYsCBSMUrW6IxxK5N7Ds4CQiFS+u/
+Inog71/bclMM1CdRqT7I7hgZUB4Mh/lmQ1AWFbZv0MtKmXggcrAMAl8A3I3u5m95
+Y6jVO8PzRtqQPf50Po/WMpAXpEo1VVCgpclQ1LA0F6vVWeZkEpaTtXK0iEmb3xMF
+WjutKuRZF6rQ1JMUMunPWT6GbK1O12Y9jwO04uYgC+kbvGhRBKLVL6nU/b/3ztyM
+8G9Ytu7pQJcoWb1aTC63cgCdsBamahqMAJRMp6DFcVLQqPK40YNnlVQu9QARAQAB
+tCRIZXJiZXJ0IFZhbGVyaW8gUmllZGVsIDxodnJAZ251Lm9yZz6JAjgEEwECACIF
+AlMsofQCGwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJELo8uj/+IrV0/9UQ
+ALtysTLkCwAooB0ZsWcU9iQ1l+PTPUajah5I7u4AQ4nYwpn32Sde4K7lRszAFawX
+146FqYEd9g/rTZXDBYY/H5s5H3+wRbJ9ByGn9fb1jE6xVBmlDP+krNlavQcsD/cn
+CSnH08kg+CNL7SE+Q9TApcw6KNa7vWm+bgy+lvxm7C735pWlEw5vv1d/T8nNGsUV
+/K0gRTwrvh8/SfwjtE3zIHAeG2J2NX/2Mt0oTGVm7Y4Iz1VKZ/sEAknSjYHJsBDx
+nws0Y6JqE7RuQytmYa7mtUfP6D+0xPfQEYkFlcd2g4n+yHUBIagd4Ex9uFZG5u2m
+MTQXuDSR1kNIax563gN8llDzao2XBS4iL94KZHvF6NjlxQyg9SKAPWabE9drIUQD
+WFzYClMgwIMks9KUZh8c1kCWJjoqMWvBTtaqtN9vzk2bMTAmXGIQt3TtKg++5shg
+NMTnqhi9rBuX7pW+i8o8HqXp7dEwkPEf0PgAfWJVP8n85TpQaBkuJckSbFOXG0ML
+cdWxLnfzomrdmvaSfZqMsSqT7QGqpCSQjk2WzrPHAKJyM/n9wZa829fI9mjhVXCk
+FaIJEIPHY4jrNOyHtK1ATNqaf256lFKTdvsfCQ6esB1na3uORfj1Ya9zmaKV9yEV
+oMFNs9HGwsY0/YSDeIauQYNeluB/ixfyVMY5xIlD3he+iQI7BBMBAgAlAhsDBgsJ
+CAcDAgYVCAIJCgsEFgIDAQIeAQIXgAUCUyynbgIZAQAKCRC6PLo//iK1dH8YD/9A
+LuOUjw0JqRa5YgSXsTNuxpJ1XwAkqQ6HgHvu24LYVeVi0btdY7neIRth2kioIuU4
+U0GRKpMba6lJy4H2XHktRRJFSWymywPbgMTJh4/z8Pb7O1f2DkV2gORED6xcI+ip
+QLiNPAuymSy/RYs9MxT6cn3hNb2EkflyVA96XQ8yd/cWdEMf3b/G8hrgThpCkPMM
+7mIfWP/iaxHAagk5j7FqfDu0wRl4qVQInU1QCJkM5HzW03JuphVKs2bcVhgv3dI6
+3tI4p13P5aCOleqg/HRTJ9GVHCJSKrqzw6PAYuO6j3NF0GhtXHF19XGz7umufKjM
+pty4bc/HFCwZqXfEF+NZ2FN5I9yauVKVdLaRGkAc59kSqzeLu1QSIOHFQFi44AH/
+q/XTT4yRPS3OeES6BbqroGFBVzA9b+cdiym6s2B9w2CqF9wp4gPmE2PwszLNuRZA
+Hh3hmSHbEgpQHqQLOSFW5s27jbXSsvUFoZqcTMGtHT7UsOHqnbuPfBifv0B6S4AN
+miRedfr1xmcr+lQ3x3GPvyAwLp3J+o4KiwcOdwV3z1M3ley0QDf0Z13iGKcXMdcm
+m5mzTxMjHQQFQNzdmb8jAsnThMMQD/OT8IWA+aHaHzdJeIWtHD4CC6gKA4d1kB0o
+1v9u0Z8dBrYBF0Td8REURc2xXEwxh6Y1ymdKNVqaPrQnSGVyYmVydCBWYWxlcmlv
+IFJpZWRlbCA8aHZyQGh2cmxhYi5vcmc+iQI4BBMBAgAiBQJTLKblAhsDBgsJCAcD
+AgYVCAIJCgsEFgIDAQIeAQIXgAAKCRC6PLo//iK1dOU/D/4+uAXoIYZvp+TNNRvx
+xfJgeBBzV6VrTuD9/abwbVxmfaqehkz68XW4XxKyW85eo9m+31q6vYxmAsD2VYsL
+uhywZtkdvH/bwAQ95kCK2KfgmYzH9xWVJy1CIYUDvCm5sMEAYpCIpjKsI5Rciyro
+Ow0AkVulZyMtSs8aezIyaE957YKUbwPKF62DakAntrTzspRRFUs0mol+tmaeKRFJ
+1+HETvf11CznyA/IIIM3+73N2MnPmG0cWibfkQQKZcHcQ5q75pnuyZUtKwbAO7J3
+Nzi4ujaZXkX++GPqBFl/YE8JpH1wzQMKlZITVIDkhnB0DQTNYZqT3FqikBXh+4/e
+o/EUV/Jx34jBXdrAunY/U2M4Z/sS2n+8W08pBm9ipW9USDSiSogqVcpbWiRppWRY
+vW6leOUD/dRhTPHZcgBIE9wsYwOHUmSV+RpN94Tjyj/5ybDlbZDVbivkB92HSE/Y
+uDHBIeD6hcRQ4fbxb29o4D3PkAuBcpSJDNh4b6UcTcbyNlSzB2SVztk30RbgjYCZ
+2jQfLaDuwuMcTexKmZrTvo6WXufv5U0G92mBK+yyFO7v7CjFGch9/dC6YJQvoLlB
+j1pDy2K27Mw4sCM0lH+gWJd4ODjBjqs8bUU64nJsfxtNhRI+VLQEbO69jcFfl9Av
+1QkmU6G/sHZGaJuZfdBPLRJzgrQrSGVyYmVydCBWYWxlcmlvIFJpZWRlbCA8aHZy
+aWVkZWxAZ21haWwuY29tPokCOAQTAQIAIgUCUyynJwIbAwYLCQgHAwIGFQgCCQoL
+BBYCAwECHgECF4AACgkQujy6P/4itXSe0w/9Fy6PKAm6Y2/8k4Yuo6PNdNckaQ3F
+n8x5yrRgXVWK6tPTmIoRn8u39KGzTluX6egjQ044zOD90BtPxHXf9GLqpn0TdS4E
+4of3RBBdyKZGChPM75D0F+IJa3A3LrlrH93SdNooTKx+nz/n+47SmMR6+Nh6qaKo
+1BewLEhsq4a1tpng1dlgH7li8MSfYVu/xMM/BbP7P60N+qIBaGANdqo0qTphIez3
+nDiXwk4sn4fgVDOfwubzops75Am4yxKsQel6w2d1HVboTDeDi+fiX94mvjEUnzO4
+NAQydLxyl6Auxua0sO8+GgTxsFnJGPZwQ/susQvXI7G+kVjdaxfU16dd+AEg4jLE
+0EIWPLbhTw7Ucw77+CNdtJcnYru/jXGbrG45qZRMRHkyZXl41E/MTdoLu5oo57IX
+rLvYUlr4moAp+BbrUKSo36/P2qez2cwkRQLKSszreztdWDHxYI8c8ks2ONDhkSzk
+3HykcDhayidbyX86T0Q7BpBTbzF/KZAK95Rnkx/1B1o42Th0x33X7ghE3CsBJEEp
+xSQpWTdW5JnVTX5Omqag3FCrQymBx9BtMtU5bT78gddInf+xt75znvrBoGaTwn+w
+eb6Qs2SSyjauIJ0qGo6xCchB9zNKeG5xl7yhSrjc5daFcflUxhKbscB3I/lNs90b
+5DKQJ0KzhM84hpu4MwRc0YtJFgkrBgEEAdpHDwEBB0D3AnsIcUcp0rS7+LMdJk+C
+Qo8PYjXa+p0bf7IBYWIgs4kCrQQYAQoAIBYhBEJ8tpqsnQDypDyvHLo8uj/+IrV0
+BQJc0YtJAhsCAIEJELo8uj/+IrV0diAEGRYIAB0WIQRLLNojXgxYQcfuh2Eur4uL
+sShz9QUCXNGLSQAKCRAur4uLsShz9ftoAQCnY7kVXKck9inDu5k+rEkjo16NN/Qy
+qlDG/aQAj7SOdQEA0wmB/Xcan8A7Dup+//BBLdE8wcVz8RpOaPc2WaUssAizWw/+
+KOxq3Z6EeLkA9cPERmrF+6+Qw4ZTy1npjXp79jqdR7qBspaRTjyxl/4aJHv8RqUD
+LkaQdtKIKgeJ0R6m9YjpVTi9zu8b8w2EbHcYb+R1GxNhUWNCtAwYIuqxQKPTFRlL
+ew9IGPMfDlRgQ1//GUbOTC1Sbz/SAQzG7gwJafhsHoD9qx+JYAAZelOFZlGD5JXq
+1DmNGErahM0h/ye0EnssBk0DRKqMFP+YSZyCxzCwWTvcnz224dVuLGGiyZ2tETL1
+eOLAPkhZFeUcSjFdCMJSBAmzsIMQPkqPk/JYfjiM9Jvl1nJFsf3s3+xI4QaDlJeE
+JX4e8QqYC1aPyWueesC7STo+o9VbYRLhMnhqECLAcTJNlRez24YkWAEYYdiDBnph
+1NNyCwhNd/GprBExYEXJ5AKCpd5RYg9Ph3DrAQGDKVSjTX9mfoviaKHngoYouSwH
+GgfZFf5YFoU61ndx3FYmHFPi/wrkZSdZLEly1fT03N01TU+yNXCeAcDDySLq6lPM
+CrPwx/vpyVb7eEY+7gJr1+Q1n2ovTl3qeYESo9AIuVvkJFg9pqGa4197okG6Ngj/
+hXrYUE4+Vyl2wgsytNXZjlNGg7oEftIf1yimUZzWfZcq9pg+2k8wfrFILJe402Qv
+zJ8kI7rXgMRYB6gXHib9cxcFNA49foTOr6uSYoSqTpe4OARc0YtpEgorBgEEAZdV
+AQUBAQdAkRgL4YUm0pNaM/eHly/GuBv/2MifnXbYWqvEZaaugmoDAQgHiQI2BBgB
+CgAgFiEEQny2mqydAPKkPK8cujy6P/4itXQFAlzRi2kCGwwACgkQujy6P/4itXRB
+xA/+Ka6H2LFkgR+p3w2fX2lJ3Mm7T77hYJjPUFOWSB7dEfW976qRkjy3d9KmSvyk
+DaTmaUngd5wYEHl4rJtt3PQYIOzIoJ4UssiocvaFlpsW3/d4oUnNcbx/7PAXnCmG
+R5x0Uo/D+qeiHj88mdv17UWKnnJ8PLMC77Y7czw1H0HLugEbTuv7scK9sL9uLEhF
+T4RCYDrYs+ZQeX16QKpp7AJ2mtqfdG4kCjPC+FwV+w5R24STP7aPlElJuG4f8olv
+OmU9OzpORYsd6r8b6872dcSCNjaCjzgfI2MDbm9YkqmkfytxjFk2Cym2dO1sGRKX
+dRR29uJqozjWHOGIKgtBsPrL726xNT1zGki5SS2f+MMB1QTS+eOryYoNjsAgnfry
+7UlbM+P2aqU4AzE/ogs595wdbmr96Bh5x9j6OD4DALcL8NCKt9T/8ZADs9qC2RhM
+gp3OnAEqjkxCb6DKSGKd/Sh6uDLSH37pnjnvhJRTHFnv7m4osZHGN0PA1o3MIHK+
+9y0XsAZcR3VtuIcWHMKaoPNxUg5ec3L/ntR2IIHCTW/NaUnGqs5UGQJZhQaaAKfV
+Bg22ahpqI66xOIZIQ2HXzkIZzzbnjied/AWYnLu3JwGnKzPo0pE4cVDPoboHAbHd
+Dx0meWIf7nVfbUOZkPgwGA55V4d0drYT18DdoiLvXoWqgnO5Ag0EUyyh9AEQAPim
+eFcq8EIK6BLdz1itcE2NbMjhj+/hIgL3PaoY4zR6+/c9gD64Ag8CliwdursHBgFx
+I+Z0qxPPhaOzRa9+q5CLRKl2bx0Uu5z1loOWrD6RJuUy67ILroEDsGIiZQdvKtDr
+HTqTxKdtpdokYmBVh4K9CTffKo0rm/b7jY1LUM5gItRJffBKiGtM86nI4nWSF0EF
+9UcuS9UGxZ4S1yfkNNNzQDiHkHmP9tmcdC//xBmeaHrO8K6U0JKK6/Hwuj1DmcMg
+5oXmBKb7UGkfq/QtiVTG6G9uzmBBxhDgfvxeyPvYA3G6DkdRwfKbLLbrm8z+cex7
+/fIYL9+awuOkxX8a51JP4cm0NGe4v41lqDx4BQ8HcmaxJQ88JoHXUlliuGmqM29t
+CuOhKdx8R+4M681hy1aLZA3JLfCO9KRvxBJneyVPWQn/I/A5UfLbmgNN1nJaTnVA
+ISVJLvfsXCUVwvL2IIQWYaCeZ0CMou5Q5UjVCxe1FJfzFddCHvsoLVewd1pC+S/2
+KJu4hiINDzGwx7Fdgew4WYQ1iS0GpVZFUtX3ZUXC6qSobspaO5LlbLimk10FtFuB
+ewJbrh7RETKCvq4K/oAqGX1ic84PJAJbVSITvWt25P/f474QkHuJ+goSPQQCXx52
+zhsup3SOnkoFigCCvvvDnjwAk5drN4eHoIAbKnx1ABEBAAGJAh8EGAECAAkFAlMs
+ofQCGwwACgkQujy6P/4itXSfTw//euoTI8HcB39BCS/ER282uhkrIlwfNJVpqiKF
+9SU0DGoO2u43bnNiATij/n8cIynYDQLBzQddrSg6DadwzuUgiiGllt4e6baO57c/
+ig9rgWAsKRqvS5zMfRyVfDxHiXJoHScWS7pdeKL6e8yS6kI+Hram4S3IajP6ngRR
+6byOQ4isBGvBPDYtKCa/Blur8qMiGLb4lFY5xKDHtfUQxGg2S+D9AS7TB26HFCfr
+mkzXvcLdR99w7gdqh8THXuWKQtyJB8bA0yq1wLzRnwdhtjWDe1t8RIS2jkrgXgtg
+mAOmGqdFJ6CvdkulPSh2j+lIQB/mCwbbPJIlXJNKfhkRLkFaLgk1H6QfmksHJiMU
+u0GuBVbZl7ociQizBLV0VUmAoWNx1BfE21peNTulE5YCmltnFr8MFcnkez/cBt4o
+4CY5T2YCOF69Jv87rTJ2M0Bsp+tvLegl9yWH95bALSr7mjyy+TBbRM67E3uqG7rB
+ZKwrH9PYB8vHjbv5JwL0rKnIvphovy47obhNzSFlAMVFyjGvvyGfrdTKIAb9yZck
+Htcjio654gtVucl1nMszAW99addT2VB6IA4lhRf7xMCno+u9HGnAmM3dG0spD+2c
+eXShroNrxWxWUDfeB+/dc0Q6csYdyrttZlq/+XjAB/pCBCrEUEWCGQBPNLjz1vfZ
+KqR6nUc=
+=fr01
+-----END PGP PUBLIC KEY BLOCK-----

8.8/Dockerfile

@@ -6,21 +6,27 @@ ENV LANG            C.UTF-8
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends gnupg ca-certificates dirmngr curl git && \
+    rm -rf /var/lib/apt/lists/*
+
+## embed GHC Debian package and Stack signing keys
+ADD *_KEYS /
+
+RUN apt-key add DEB_KEYS && \
     echo 'deb http://downloads.haskell.org/debian stretch main' > /etc/apt/sources.list.d/ghc.list && \
-    apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BA3CBA3FFE22B574 && \
     apt-get update && \
     apt-get install -y --no-install-recommends ghc-8.8.1 cabal-install-3.0 \
         zlib1g-dev libtinfo-dev libsqlite3-dev g++ netbase xz-utils make openssh-client && \
-    curl -fSL https://github.com/commercialhaskell/stack/releases/download/v2.1.3/stack-2.1.3-linux-x86_64.tar.gz -o stack.tar.gz && \
+    rm -rf /var/lib/apt/lists/*
+
+RUN curl -fSL https://github.com/commercialhaskell/stack/releases/download/v2.1.3/stack-2.1.3-linux-x86_64.tar.gz -o stack.tar.gz && \
     curl -fSL https://github.com/commercialhaskell/stack/releases/download/v2.1.3/stack-2.1.3-linux-x86_64.tar.gz.asc -o stack.tar.gz.asc && \
     export GNUPGHOME="$(mktemp -d)" && \
-    gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys C5705533DA4F78D8664B5DC0575159689BEFB442 && \
-    gpg --batch --keyserver ha.pool.sks-keyservers.net --recv-keys 2C6A674E85EE3FB896AFC9B965101FF31C5C154D && \
+    gpg --batch --import STACK_KEYS && \
     gpg --batch --trusted-key 0x575159689BEFB442 --verify stack.tar.gz.asc stack.tar.gz && \
     tar -xf stack.tar.gz -C /usr/local/bin --strip-components=1 && \
     /usr/local/bin/stack config set system-ghc --global true && \
     /usr/local/bin/stack config set install-ghc --global false && \
-    rm -rf "$GNUPGHOME" /var/lib/apt/lists/* /stack.tar.gz.asc /stack.tar.gz
+    rm -rf "$GNUPGHOME" /stack.tar.gz.asc /stack.tar.gz
 
 ENV PATH /root/.cabal/bin:/root/.local/bin:/opt/cabal/3.0/bin:/opt/ghc/8.8.1/bin:$PATH