From 08b0b7455536e415dcf11329ef66bad76eefbf48 Mon Sep 17 00:00:00 2001
From: le0m <mainardi.leo@gmail.com>
Date: Mon, 26 Jan 2026 21:33:41 +0100
Subject: [PATCH] fix: Debian Stretch repositories signing keys were also
 archived

---
 Dockerfile | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index cae8d9c..189d883 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -3,10 +3,12 @@ FROM ${BASE_IMAGE}
 LABEL maintainer="dev@chialab.io"
 
 # Fix Debian 9 (Stretch) source list, because it has been moved to archive
+# Paranoid people should manually download and verify the signing key from https://ftp-master.debian.org/keys.html
 RUN if [ "$(grep '^VERSION_ID=' /etc/os-release | cut -d '=' -f 2 | tr -d '"')" -eq "9" ]; then \
         sed -i -e 's/deb.debian.org/archive.debian.org/g' \
                -e 's/security.debian.org/archive.debian.org/g' \
                -e '/stretch-updates/d' /etc/apt/sources.list; \
+        apt-get update && apt-get install -y --allow-unauthenticated debian-archive-keyring; \
     fi
 
 # Download script to install PHP extensions and dependencies