improvement: add checksums to downloads

This now verifies that the download I am downloading is the one I want. All
checksums are sha256
This commit is contained in:
Ade Attwood 2020-11-22 21:07:44 +00:00
parent d3a2f6dbe3
commit 160220cf5e
2 changed files with 10 additions and 6 deletions

View file

@ -43,15 +43,17 @@ node default {
# Install alacritty from deb archive is not available
#
archive { '/tmp/alacritty.deb':
ensure => present,
source => 'https://github.com/alacritty/alacritty/releases/download/v0.4.3/Alacritty-v0.4.3-ubuntu_18_04_amd64.deb'
ensure => present,
source => 'https://github.com/alacritty/alacritty/releases/download/v0.4.3/Alacritty-v0.4.3-ubuntu_18_04_amd64.deb',
checksum => 'f4e40511e1e1495d15e518f5bfccfff2ed69b171ff53964622c1e66bbe954000',
checksum_type => 'sha256',
}
package { 'alacritty':
ensure => present,
provider => dpkg,
source => '/tmp/alacritty.deb',
require => [
source => '/tmp/alacritty.deb',
require => [
Archive['/tmp/alacritty.deb']
],
}

View file

@ -1,8 +1,10 @@
class vscode {
archive { '/tmp/microsoft.asc':
ensure => present,
source => 'https://packages.microsoft.com/keys/microsoft.asc',
ensure => present,
source => 'https://packages.microsoft.com/keys/microsoft.asc',
checksum => '2cfd20a306b2fa5e25522d78f2ef50a1f429d35fd30bd983e2ebffc2b80944fa',
checksum_type => 'sha256',
}
exec { 'gpg --dearmor /tmp/microsoft.asc':