openstack/diskimage-builder
Code Issues Proposed changes

Add a sha256sum check for CentOS Cloud Images

Browse Source 
Related-bug: 2120974
Change-Id: Iac8c315a9ebdf8a96bb483e992e19798b91c4816
Signed-off-by: Clif Houck <me@clifhouck.com>
This commit is contained in:
Clif Houck
2025-08-19 16:12:45 -05:00
parent 75b99e1990
commit ed145a9a6d
1 changed files with 16 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
diskimage_builder/elements/centos/root.d/10-centos-cloud-image
View File

@@ -46,6 +46,22 @@ else
BASE_IMAGE_TAR=$BASE_IMAGE_FILE.tgz
IMAGE_LOCATION=$DIB_CLOUD_IMAGES/$BASE_IMAGE_FILE
CACHED_IMAGE=$DIB_IMAGE_CACHE/$BASE_IMAGE_FILE
IMAGE_SUM_FILE=$BASE_IMAGE_FILE.SHA256SUM
IMAGE_SUM_LOCATION=$IMAGE_LOCATION.SHA256SUM
CACHED_SUM=$DIB_IMAGE_CACHE/$IMAGE_SUM_FILE
# Fetching image and its hash prior to extract-image below.
# extract-image will find the cached image and continue normally.
# Until extract-image also incorporates hash checking, this is the way.
$TMP_HOOKS_PATH/bin/cache-url $IMAGE_LOCATION $CACHED_IMAGE
$TMP_HOOKS_PATH/bin/cache-url $IMAGE_SUM_LOCATION $CACHED_SUM
pushd $DIB_IMAGE_CACHE
if ! sha256sum --quiet --check $CACHED_SUM ; then
echo "ERROR: Image '$CACHED_IMAGE' failed sha256sum check!"
exit 1
fi
popd
fi
echo "Extracting image..."
$TMP_HOOKS_PATH/bin/extract-image $BASE_IMAGE_FILE $BASE_IMAGE_TAR $IMAGE_LOCATION $CACHED_IMAGE