monero-project/monero-site
monero-project/monero-site
1
0
Fork 0
mirror of https://github.com/monero-project/monero-site.git synced 2024-11-17 00:07:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

ci: Fix hash checking workflow

Browse source 
* Download bF's key from GitHub instead of from unreliable keyserver
* Resolve redirects manually instead of checking server
This commit is contained in:
Matt Smith 2020-08-19 19:31:15 +01:00
parent 9ce1428574
commit fcbae2a54e
No known key found for this signature in database
GPG key ID: D0EAC8943FB1B2C1
1 changed files with 25 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
.github/workflows/hashes.yaml vendored
View file

@ -21,7 +21,8 @@ jobs:
sudo pip install yq sudo pip install yq
- name: Verify hashes.txt signature - name: Verify hashes.txt signature
run: | run: |
gpg --recv-keys 81AC591FE9C4B65C5806AFC3F0AF4D462A0BDF92 curl -sL https://raw.githubusercontent.com/monero-project/monero/master/utils/gpg_keys/binaryfate.asc |
gpg --import
gpg --verify downloads/hashes.txt gpg --verify downloads/hashes.txt
- name: Download releases - name: Download releases
run: | run: |
@ -45,6 +46,27 @@ jobs:
[ -z "$line" ] && continue [ -z "$line" ] && continue
url=$(echo $line | cut -d'|' -f1) url=$(echo $line | cut -d'|' -f1)
hash=$(echo $line | cut -d'|' -f2) hash=$(echo $line | cut -d'|' -f2)
filename=$(curl -sLI $url | awk -F '/' '/^Location:/ {print $NF}' | tail -n1 | sed 's/\r//') filename=
case $url in
*gui/win64install) filename=monero-gui-install-win-x64 ;;
*gui/win64) filename=monero-gui-win-x64 ;;
*gui/mac64) filename=monero-gui-mac-x64 ;;
*gui/linux64) filename=monero-gui-linux-x64 ;;
*cli/win64) filename=monero-win-x64 ;;
*cli/win32) filename=monero-win-x86 ;;
*cli/mac64) filename=monero-mac-x64 ;;
*cli/linux64) filename=monero-linux-x64 ;;
*cli/linux32) filename=monero-linux-x86 ;;
*cli/linuxarm8) filename=monero-linux-armv8 ;;
*cli/linuxarm7) filename=monero-linux-armv7 ;;
*cli/androidarm8) filename=monero-android-armv8 ;;
*cli/androidarm7) filename=monero-android-armv7 ;;
*cli/freebsd64) filename=monero-freebsd-x64 ;;
*)
echo "Unknown url $url" >&2
exit 1
;;
esac
filename=$(awk "/${filename}/ {print \$2}" downloads/hashes.txt)
echo "$hash $filename" | sha256sum -c echo "$hash $filename" | sha256sum -c
done done