dev-lxc 2.2.3 → 2.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 5561d60e7887cad1c29c9d1cb18363b0d09a9687
-  data.tar.gz: fa29a6fc4291a7bf48483a6309602542b9116778
+  metadata.gz: 9aeb8759ea61759a5c8b6888306cd05e0806ed1d
+  data.tar.gz: d12cfeeaa05bb6e5ce82896768ea87f7e01aa97d
 SHA512:
-  metadata.gz: 2f93035b7594c97cf9a4a637cbc66cbde1e714852bfc81bab1d0dd3d667a7e8d48f753306074c9bdd628e0bf5decbe5f87fdb88d370a8444109bb56fe36193a7
-  data.tar.gz: ed0862acfae520555f40be824bfcd92f68ef987a4019d29e387b049daff5824896e5ed8054c087cc7bf0cabc56078ca6835b29a6e04949478036a9a6da8ef6e6
+  metadata.gz: 7339707e329e093333257d64ef62b980919c10c87fd04efd26c6557ce1dd39ea4cc88b9c5f47933902926cb876c4acc2dca754a7205925a7275e24a97d76b7c1
+  data.tar.gz: 0b9c409e8b1f8a51e32cbf7a9b98582b4e119a1db6eb9822af6583885fd1049c0267a8eb0199250add89e6dd0cf74154ad97dc0cb60e5cfb363db7034c2a3f29

data/CHANGELOG.md

@@ -1,5 +1,9 @@
 # dev-lxc Change Log
 
+## 2.2.4 (2016-08-24)
+
+* Add sha256 check for downloaded packages
+
 ## 2.2.3 (2016-07-27)
 
 * Copy validation key when validation_key is set

data/docs/prerequisites.md

@@ -1,9 +1,9 @@
 
 #### Download and Install Prerequisites
 
-Download and install [VirtualBox](https://www.virtualbox.org/wiki/Downloads).
+Download and install [VirtualBox 5.0.14+](https://www.virtualbox.org/wiki/Downloads).
 
-Download and install [Vagrant](https://www.vagrantup.com/downloads.html).
+Download and install [Vagrant 1.8.5+](https://www.vagrantup.com/downloads.html).
 
 Install the vagrant-persistent-storage plugin.
 

data/lib/dev-lxc/cluster.rb

@@ -452,7 +452,7 @@ module DevLXC
       server.container.save_config
     end
 
-    def get_product_url(server, product_name, product_options)
+    def get_product_download_info(server, product_name, product_options)
       server_type = @server_configs[server.name][:server_type]
       base_container = DevLXC::Container.new(@server_configs[server.name][:base_container_name])
       mixlib_install_platform_detection_path = "#{base_container.config_item('lxc.rootfs')}/mixlib-install-platform-detection"
@@ -483,7 +483,7 @@ module DevLXC
         puts JSON.pretty_generate(options)
         exit 1
       end
-      artifact.url
+      [artifact.url, artifact.sha256]
     end
 
     def calculate_required_products(servers, force=false)
@@ -501,11 +501,11 @@ module DevLXC
         products.each do |product_name, product_options|
           if product_options && product_options['package_source']
             package_source = product_options['package_source']
-            all_required_products[package_source] = product_name
+            all_required_products[package_source] = [product_name, nil]
             @server_configs[server.name][:required_products][product_name] = package_source
           else
-            package_source = get_product_url(server, product_name, product_options)
-            all_required_products[package_source] = product_name
+            package_source, package_sha256 = get_product_download_info(server, product_name, product_options)
+            all_required_products[package_source] = [product_name, package_sha256]
             product_cache_path = "/var/dev-lxc/cache/chef-products/#{product_name}/#{File.basename(package_source)}"
             @server_configs[server.name][:required_products][product_name] = product_cache_path
           end
@@ -516,7 +516,8 @@ module DevLXC
 
     def prep_product_cache(servers, force=false)
       all_required_products = calculate_required_products(servers, force)
-      all_required_products.each do |package_source, product_name|
+      all_required_products.each do |package_source, v|
+        product_name, package_sha256 = v
         if package_source.start_with?('http')
           product_cache_path = "/var/dev-lxc/cache/chef-products/#{product_name}/#{File.basename(package_source)}"
           if !File.exist?(product_cache_path)
@@ -524,6 +525,11 @@ module DevLXC
             puts "Downloading #{package_source} to #{product_cache_path}"
             open(package_source) { |url| File.open(product_cache_path, 'wb') { |f| f.write(url.read) } }
           end
+          actual_sha256 = Digest::SHA256.file(product_cache_path).hexdigest
+          if package_sha256 != actual_sha256
+            puts "ERROR: Invalid SHA256 #{actual_sha256} for #{File.basename(product_cache_path)}."
+            exit 1
+          end
         elsif !File.exist?(package_source)
           puts "ERROR: Package source #{package_source} does not exist."
           exit 1

data/lib/dev-lxc/version.rb

@@ -1,3 +1,3 @@
 module DevLXC
-  VERSION = "2.2.3"
+  VERSION = "2.2.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dev-lxc
 version: !ruby/object:Gem::Version
-  version: 2.2.3
+  version: 2.2.4
 platform: ruby
 authors:
 - Jeremiah Snapp
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-07-27 00:00:00.000000000 Z
+date: 2016-08-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -134,4 +134,3 @@ signing_key:
 specification_version: 4
 summary: A tool for building Chef server clusters using LXC containers
 test_files: []
-has_rdoc: