diff --git a/.github/workflows/hashes.yaml b/.github/workflows/hashes.yaml index e5e4d9ff..f2e724a7 100644 --- a/.github/workflows/hashes.yaml +++ b/.github/workflows/hashes.yaml @@ -72,3 +72,38 @@ jobs: filename=$(awk "/${filename}/ {print \$2}" downloads/hashes.txt) echo "$hash $filename" | sha256sum -c done + - name: Validate source integrity + run: | + version_gui=$(awk '/monero-gui-source-v/ {print $2}' downloads/hashes.txt | awk -F".tar.bz2" '{print $1}' | awk -F"-" '{print $4}') + version_cli=$(awk '/monero-source-v/ {print $2}' downloads/hashes.txt | awk -F".tar.bz2" '{print $1}' | awk -F"-" '{print $3}') + echo -e "\n--> GUI version: $version_gui \n--> CLI version: $version_cli" + mkdir validate_sources + cd validate_sources + # Download / verify git-archive-all.sh + curl -O https://raw.githubusercontent.com/fabacab/git-archive-all.sh/fc86194f00b678438f9210859597f6eead28e765/git-archive-all.sh + echo "db62e9a824866989c9d080f008ec06d81421cf94bed3762acba3b9148607af2d git-archive-all.sh" | sha256sum -c + chmod +x git-archive-all.sh + echo -e "--> Generating tarballs..." + # CLI + git clone --recursive -b $version_cli --depth 1 --shallow-submodule https://github.com/monero-project/monero.git monero.git && cd monero.git && ../git-archive-all.sh --prefix monero-source-${version_cli}/ --format tar --tree-ish $version_cli ../monero-source-${version_cli}.tar && cd .. && bzip2 monero-source-${version_cli}.tar + # GUI + git clone --recursive -b $version_gui --depth 1 --shallow-submodule https://github.com/monero-project/monero-gui.git monero-gui.git && cd monero-gui.git && ../git-archive-all.sh --prefix monero-gui-source-${version_gui}/ --format tar --tree-ish $version_gui ../monero-gui-source-${version_gui}.tar && cd .. && bzip2 monero-gui-source-${version_gui}.tar + mkdir yours + cp monero-gui-source-${version_gui}.tar.bz2 yours/. + cp monero-source-${version_cli}.tar.bz2 yours/. + mkdir from_website + echo -e "\n--> Move tarballs from getmonero..." + mv ../monero-gui-source-${version_gui}.tar.bz2 from_website/. + mv ../monero-source-${version_cli}.tar.bz2 from_website/. + echo -e "\n--> Unpacking all..." + bunzip2 yours/*.bz2 + bunzip2 from_website/*.bz2 + tar xf yours/monero-source-${version_cli}.tar -C yours/ + tar xf yours/monero-gui-source-${version_gui}.tar -C yours/ + tar xf from_website/monero-source-${version_cli}.tar -C from_website/ + tar xf from_website/monero-gui-source-${version_gui}.tar -C from_website + # Compare directories + echo -e "\n--> Comparing CLI directories" + diff -r yours/monero-source-$version_cli from_website/monero-source-$version_cli + echo -e "\n--> Comparing GUI directories" + diff -r yours/monero-gui-source-$version_gui from_website/monero-gui-source-$version_gui