Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Validate checksum after successful import #627

Draft
wants to merge 3 commits into
base: main
Choose a base branch
from

Commits on Sep 26, 2023

  1. Validate provided checksum after successful import

    Use the 'verify_checksum' hash value in the yaml files to
    verify the image integrity after it has been successfully
    imported. Show a warning, if either the hash algorithm
    or the hash value does not match the expected fields.
    
    Fixes osism#340
    
    Signed-off-by: Gondermann <[email protected]>
    gndrmnn committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    e42012d View commit details
    Browse the repository at this point in the history
  2. Add verification sha512 sums to images

    Signed-off-by: Gondermann <[email protected]>
    gndrmnn committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    5bc0135 View commit details
    Browse the repository at this point in the history
  3. Force update script to download the image and calculate SHA512

    Since we want to check the hash against the openstack backend,
    we need to have the SHA512. Sadly, most images creators do not
    provide us with that hash pre-computed. That means we will
    compute the SHA512 for every new image update in the CI worker
    by downloading the image.
    
    Signed-off-by: Gondermann <[email protected]>
    gndrmnn committed Sep 26, 2023
    Configuration menu
    Copy the full SHA
    6a1dd54 View commit details
    Browse the repository at this point in the history