From 3299926acf3e7b3ba5c7ad828246bde87fc14aba Mon Sep 17 00:00:00 2001
From: Hermes Agent <hermes@williammiceli.me>
Date: Sat, 15 Aug 2026 22:26:25 +0000
Subject: [PATCH] Fix checksum verification: download under the exact asset
 filename

sha256sum -c validates the file under the name recorded in the
checksums file (mcp-grafana_Linux_<arch>.tar.gz); saving the download
as mcp.tar.gz made the check fail with 'No such file or directory'.
---
 Dockerfile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index ee58a14..6b1e6ce 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -43,9 +43,9 @@ RUN set -eux; \
         *) echo "unsupported TARGETARCH: $TARGETARCH"; exit 1 ;; \
     esac; \
     curl -fsSL "https://github.com/grafana/mcp-grafana/releases/download/${MCP_GRAFANA_VERSION}/mcp-grafana_${SHORT}_checksums.txt" -o checksums.txt; \
-    curl -fsSL "https://github.com/grafana/mcp-grafana/releases/download/${MCP_GRAFANA_VERSION}/mcp-grafana_${ASSET}.tar.gz" -o mcp.tar.gz; \
+    curl -fsSL "https://github.com/grafana/mcp-grafana/releases/download/${MCP_GRAFANA_VERSION}/mcp-grafana_${ASSET}.tar.gz" -o "mcp-grafana_${ASSET}.tar.gz"; \
     grep "mcp-grafana_${ASSET}.tar.gz" checksums.txt | sha256sum -c -; \
-    tar -xzf mcp.tar.gz mcp-grafana; \
+    tar -xzf "mcp-grafana_${ASSET}.tar.gz" mcp-grafana; \
     chmod +x mcp-grafana
 
 # The binary is fully static (no INTERP segment) — scratch is sufficient.