chore(HaRP-frp): install FRP from releases (#39)

Signed-off-by: Oleksander Piskun <oleksandr2088@icloud.com>

Author: oleksandr-nc

Dockerfile

@@ -6,21 +6,36 @@ RUN apt-get update && apt-get install -y curl && \
 ARG BUILD_TYPE
 COPY requirements.txt /
 
-# Download and install FRP client
+# Download and install FRP client with checksum verification
+# FRP version and checksums - update these when upgrading
+ARG FRP_VERSION=0.61.1
+ARG FRP_AMD64_SHA256=bff260b68ca7b1461182a46c4f34e9709ba32764eed30a15dd94ac97f50a2c40
+ARG FRP_ARM64_SHA256=af6366f2b43920ebfe6235dba6060770399ed1fb18601e5818552bd46a7621f8
+
 RUN set -ex; \
     ARCH=$(uname -m); \
     if [ "$ARCH" = "aarch64" ]; then \
-      FRP_URL="https://raw.githubusercontent.com/nextcloud/HaRP/main/exapps_dev/frp_0.61.1_linux_arm64.tar.gz"; \
+        FRP_ARCH="arm64"; \
+        FRP_SHA256="${FRP_ARM64_SHA256}"; \
     else \
-      FRP_URL="https://raw.githubusercontent.com/nextcloud/HaRP/main/exapps_dev/frp_0.61.1_linux_amd64.tar.gz"; \
+        FRP_ARCH="amd64"; \
+        FRP_SHA256="${FRP_AMD64_SHA256}"; \
+    fi; \
+    FRP_URL="https://github.com/fatedier/frp/releases/download/v${FRP_VERSION}/frp_${FRP_VERSION}_linux_${FRP_ARCH}.tar.gz"; \
+    echo "Downloading FRP v${FRP_VERSION} for ${FRP_ARCH}..."; \
+    curl -fsSL "${FRP_URL}" -o /tmp/frp.tar.gz; \
+    ACTUAL_SHA256=$(sha256sum /tmp/frp.tar.gz | cut -d' ' -f1); \
+    if [ "$ACTUAL_SHA256" != "$FRP_SHA256" ]; then \
+        echo "Checksum verification failed for FRP v${FRP_VERSION} (${FRP_ARCH})"; \
+        echo "Expected: ${FRP_SHA256}"; \
+        echo "Got:      ${ACTUAL_SHA256}"; \
+        exit 1; \
     fi; \
-    echo "Downloading FRP client from $FRP_URL"; \
-    curl -L "$FRP_URL" -o /tmp/frp.tar.gz; \
     tar -C /tmp -xzf /tmp/frp.tar.gz; \
-    mv /tmp/frp_0.61.1_linux_* /tmp/frp; \
-    cp /tmp/frp/frpc /usr/local/bin/frpc; \
+    cp /tmp/frp_${FRP_VERSION}_linux_${FRP_ARCH}/frpc /usr/local/bin/frpc; \
     chmod +x /usr/local/bin/frpc; \
-    rm -rf /tmp/frp /tmp/frp.tar.gz
+    rm -rf /tmp/frp_${FRP_VERSION}_linux_${FRP_ARCH} /tmp/frp.tar.gz; \
+    echo "FRP client installed successfully"
 
 # Installing PyTorch based on BUILD_TYPE
 RUN --mount=type=cache,target=/root/.cache/pip \

Makefile

@@ -39,7 +39,7 @@ build-push-latest:
 	DOCKER_BUILDKIT=1 docker buildx build --progress=plain --push --platform linux/amd64 --tag ghcr.io/nextcloud/$(APP_ID):latest-rocm --build-arg BUILD_TYPE=rocm .
 
 .PHONY: build-podman-latest
-build-push-latest:
+build-podman-latest:
 	podman build --format=docker --platform linux/arm64/v8,linux/amd64 --tag ghcr.io/nextcloud/$(APP_ID):latest --build-arg BUILD_TYPE=cpu .
 	podman build --format=docker --platform linux/amd64 --tag ghcr.io/nextcloud/$(APP_ID):latest-cuda --build-arg BUILD_TYPE=cuda .
 	podman build --format=docker --platform linux/amd64 --tag ghcr.io/nextcloud/$(APP_ID):latest-rocm --build-arg BUILD_TYPE=rocm .