Skip to content

static: add checksum files for package archives #495

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vvoland merged 2 commits into from
Aug 19, 2026
Merged

static: add checksum files for package archives #495

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
810d7bd
static: add checksum files for package archives
crazy-max Aug 15, 2026
7d994c2
static: share checksum file generation
crazy-max Aug 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 40 additions & 0 deletions hack/scripts/write-sha256sum.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
#!/usr/bin/env bash

# Copyright 2026 Docker Packaging authors
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

set -e

if [ "$#" -ne 1 ]; then
echo >&2 "usage: write-sha256sum <file>"
exit 1
fi

file="$1"
case "$file" in
*/*)
dir="${file%/*}"
name="${file##*/}"
;;
*)
dir=.
name="$file"
;;
esac

(
set -x
cd "$dir"
sha256sum "$name" > "${name}.sha256"
)
1 change: 1 addition & 0 deletions pkg/agent/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -192,6 +192,7 @@ ARG TARGETPLATFORM
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/agent \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=osxcross,src=/osxsdk,target=/xx-sdk \
Expand Down
7 changes: 5 additions & 2 deletions pkg/agent/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,15 +76,18 @@ for pkgname in *; do
cp "${pkgname}"/* ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/agent/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
1 change: 1 addition & 0 deletions pkg/buildx/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -169,6 +169,7 @@ ARG TARGETPLATFORM
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/buildx \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
OUTDIR=/out BUILDDIR=/build SRCDIR=/usr/local/src/buildx pkg-static-build
Expand Down
7 changes: 5 additions & 2 deletions pkg/buildx/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,15 +73,18 @@ for pkgname in *; do
cp "${pkgname}"/* ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/buildx/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
2 changes: 2 additions & 0 deletions pkg/compose/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,6 +180,7 @@ RUN xx-apt-get install -y gcc libc6-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/compose \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
OUTDIR=/out BUILDDIR=/build SRCDIR=/usr/local/src/compose pkg-static-build
Expand Down Expand Up @@ -211,6 +212,7 @@ RUN xx-apt-get install -y gcc libc6-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/compose \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=osxcross,src=/osxsdk,target=/xx-sdk \
Expand Down
7 changes: 5 additions & 2 deletions pkg/compose/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -78,15 +78,18 @@ for pkgname in *; do
cp "${pkgname}"/* ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/compose/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
1 change: 1 addition & 0 deletions pkg/containerd/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -260,6 +260,7 @@ RUN xx-apt-get install -y gcc
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/go/src/github.com/containerd/containerd,rw \
--mount=type=bind,from=runc-src,source=/src,target=/go/src/github.com/opencontainers/runc,rw \
--mount=type=bind,from=runhcs-src,source=/src,target=/go/src/github.com/Microsoft/hcsshim,rw \
Expand Down
7 changes: 5 additions & 2 deletions pkg/containerd/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -132,15 +132,18 @@ for pkgname in *; do
fi
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/containerd/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -112,7 +112,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
2 changes: 2 additions & 0 deletions pkg/credential-helpers/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -173,6 +173,7 @@ RUN xx-apt-get install -y gcc libsecret-1-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/credential-helpers \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
OUTDIR=/out BUILDDIR=/build SRCDIR=/usr/local/src/credential-helpers pkg-static-build
Expand All @@ -198,6 +199,7 @@ RUN xx-apt-get install -y gcc libsecret-1-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/usr/local/src/credential-helpers \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=osxcross,src=/osxsdk,target=/xx-sdk \
Expand Down
7 changes: 5 additions & 2 deletions pkg/credential-helpers/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -100,15 +100,18 @@ for pkgname in *; do
cp "${pkgname}"/* ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/credential-helpers/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
2 changes: 2 additions & 0 deletions pkg/docker-cli/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -193,6 +193,7 @@ RUN xx-apt-get install -y gcc libc6-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/go/src/github.com/docker/cli,rw \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=goversioninfo,source=/out/goversioninfo,target=/usr/bin/goversioninfo \
Expand All @@ -212,6 +213,7 @@ RUN xx-apt-get install -y gcc libc6-dev
RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/pkg-static-build \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/go/src/github.com/docker/cli,rw \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=goversioninfo,source=/out/goversioninfo,target=/usr/bin/goversioninfo \
Expand Down
7 changes: 5 additions & 2 deletions pkg/docker-cli/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -84,15 +84,18 @@ for pkgname in *; do
cp ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/docker-cli/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -108,7 +108,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
1 change: 1 addition & 0 deletions pkg/docker-engine/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -208,6 +208,7 @@ RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/p
--mount=type=bind,source=scripts/check-gomod.sh,target=/usr/local/bin/check-gomod \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=src,source=/src,target=/go/src/github.com/docker/docker,rw \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
--mount=type=bind,from=gowinres,source=/out/go-winres,target=/usr/bin/go-winres \
Expand Down
7 changes: 5 additions & 2 deletions pkg/docker-engine/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -98,15 +98,18 @@ for pkgname in *; do
cp "${pkgname}"/* ${SRCDIR}/LICENSE ${SRCDIR}/README.md "$workdir/${pkgname}/"
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.zip" "${pkgname}"
zip -r "$pkgfile" "${pkgname}"
)
else
pkgfile="${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz"
(
set -x
tar -czf "${pkgoutput}/${pkgname}_${GENVER_VERSION#v}.tgz" -C "$workdir" "${pkgname}"
tar -czf "$pkgfile" -C "$workdir" "${pkgname}"
)
fi
write-sha256sum "$pkgfile"
done
4 changes: 3 additions & 1 deletion pkg/docker-engine/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -121,7 +121,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
1 change: 1 addition & 0 deletions pkg/docker/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,7 @@ RUN --mount=type=bind,source=scripts/pkg-static-build.sh,target=/usr/local/bin/p
--mount=type=bind,source=scripts/check-gomod.sh,target=/usr/local/bin/check-gomod \
--mount=type=bind,from=scripts,source=gen-ver.sh,target=/usr/local/bin/gen-ver \
--mount=type=bind,from=scripts,source=fix-cc.sh,target=/usr/local/bin/fix-cc \
--mount=type=bind,from=scripts,source=write-sha256sum.sh,target=/usr/local/bin/write-sha256sum \
--mount=type=bind,from=engine-src,source=/src,target=/go/src/github.com/docker/docker,rw \
--mount=type=bind,from=cli-src,source=/src,target=/go/src/github.com/docker/cli,rw \
--mount=type=bind,from=gocross,source=/usr/local/go,target=/usr/local/go,rw \
Expand Down
7 changes: 5 additions & 2 deletions pkg/docker/scripts/pkg-static-build.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -229,14 +229,17 @@ mkdir -p "$workdir/docker"
fi
)
if [ "$(xx-info os)" = "windows" ]; then
pkgfile="${pkgoutput}/docker-${version_no_v}.zip"
(
set -x
cd "$workdir"
zip -r "${pkgoutput}/docker-${version_no_v}.zip" docker
zip -r "$pkgfile" docker
)
else
pkgfile="${pkgoutput}/docker-${version_no_v}.tgz"
(
set -x
tar -czf "${pkgoutput}/docker-${version_no_v}.tgz" -C "$workdir" docker
tar -czf "$pkgfile" -C "$workdir" docker
)
fi
write-sha256sum "$pkgfile"
10 changes: 7 additions & 3 deletions pkg/docker/verify.Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,9 +47,11 @@ RUN --mount=from=bin,target=/build <<EOT
found=1
(
set -x
unzip -l $package
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
unzip -l "${package##*/}"
workdir=$(mktemp -d -t docker-verify.XXXXXXXXXX)
unzip -q $package -d $workdir
unzip -q "${package##*/}" -d $workdir
xx-verify --static $workdir/docker/docker.exe
xx-verify --static $workdir/docker/dockerd.exe
xx-verify --static $workdir/docker/containerd.exe
Expand All @@ -66,7 +68,9 @@ RUN --mount=from=bin,target=/build <<EOT
for package in $(find $dir -type f -name '*.tgz'); do
(
set -x
tar zxvf $package -C /usr/bin --strip-components=1
cd "${package%/*}"
sha256sum -c "${package##*/}.sha256"
tar zxvf "${package##*/}" -C /usr/bin --strip-components=1
)
done
set -x
Expand Down
Loading