Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support digest validation #106

Merged
merged 1 commit into from
Jul 6, 2021
Merged

Support digest validation #106

merged 1 commit into from
Jul 6, 2021

Conversation

AkihiroSuda
Copy link
Member

Also removes dependency on curl binary

@AkihiroSuda AkihiroSuda added this to the v0.5.0 milestone Jul 2, 2021
@AkihiroSuda AkihiroSuda requested a review from jandubois July 2, 2021 10:19
@AkihiroSuda AkihiroSuda force-pushed the dev-new-downloader branch 4 times, most recently from 1eb14fb to 0dbfbcf Compare July 2, 2021 18:01
Copy link
Member

@jandubois jandubois left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me, but I'm in a bit of a hurry right now and didn't look too closely. Will be mostly offline the next 2 days.

One thought (for a later PR) would be to support downloadable checksums. They obviously don't protect against a website spoofing attack, but still help with truncated downloads due to networking errors.

E.g. checking https://cloud-images.ubuntu.com/hirsute/current/SHA256SUMS, but maybe there are too many different formats to support for that?

@AkihiroSuda
Copy link
Member Author

Yes, I was thinking of that.
Not too many format, but probably in another PR in future

@AkihiroSuda AkihiroSuda force-pushed the dev-new-downloader branch 2 times, most recently from 58def41 to 2a25071 Compare July 5, 2021 10:08
Also removes dependency on `curl` binary

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
@AkihiroSuda AkihiroSuda force-pushed the dev-new-downloader branch from 2a25071 to ee4e080 Compare July 5, 2021 10:19
@AkihiroSuda
Copy link
Member Author

Merging and releasing v0.5.0. Support forSHA256SUMS file can be added later.

@AkihiroSuda AkihiroSuda merged commit 86d6a93 into master Jul 6, 2021
@AkihiroSuda AkihiroSuda deleted the dev-new-downloader branch July 6, 2021 07:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants