build(core): make Docker build less verbose
What changed, and why it matters
This commit only reduces the amount of text printed during a Docker build script. It adds quieter download flags for wget/curl and removes the terminal allocation flag from the Docker run command. There is no security-relevant change.
No security action needed. This is a routine build-output cleanup.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies build-docker.sh to suppress download progress output (–no-verbose for wget, –no-progress-meter for curl) and removes the -t (pseudo-TTY) flag from the docker run invocation. These are cosmetic/UX changes to build output verbosity. No code paths handling secrets, signatures, firmware images, or network security are altered.
Changed components
build-docker.shInspect captured patch +2 / −3
diff --git a/build-docker.sh b/build-docker.sh
index 463401a93..0f73e81e8 100755
--- a/build-docker.sh
+++ b/build-docker.sh
@@ -134,10 +134,10 @@ COMMIT_HASH="$(git rev-parse "$TAG")"
PRODUCTION=${PRODUCTION:-1}
if which wget > /dev/null ; then
- wget --no-config -nc -P ci/ "$CONTAINER_FS_URL"
+ wget --no-verbose --no-config -nc -P ci/ "$CONTAINER_FS_URL"
else
if ! [ -f "ci/$ALPINE_TARBALL" ]; then
- curl -L -o "ci/$ALPINE_TARBALL" "$CONTAINER_FS_URL"
+ curl --no-progress-meter -L -o "ci/$ALPINE_TARBALL" "$CONTAINER_FS_URL"
fi
fi
@@ -228,7 +228,6 @@ echo
$DOCKER run \
--network=host \
- -t \
-v "$PWD:/local" \
-v "$PWD/build:/build" \
--name "$SNAPSHOT_NAME" \
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.