mdebray/tvl-depot
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

download-from-binary-cache: Verify NAR hashes

Browse source
This commit is contained in:
Eelco Dolstra 2012-07-02 18:53:04 -04:00
parent cf49472d60
commit 8319b1ab9f
1 changed files with 15 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
scripts/download-from-binary-cache.pl.in
View file

@ -34,9 +34,9 @@ sub getInfoFrom {
elsif ($1 eq "References") { @refs = split / /, $2; } elsif ($1 eq "References") { @refs = split / /, $2; }
elsif ($1 eq "Deriver") { $deriver = $2; } elsif ($1 eq "Deriver") { $deriver = $2; }
} }
if ($storePath ne $storePath2 || !defined $url || !defined $narHash || !defined $narSize) { if ($storePath ne $storePath2 || !defined $url || !defined $narHash) {
print STDERR "bad NAR info file ‘$infoUrl’\n"; print STDERR "bad NAR info file ‘$infoUrl’\n";
return undef return undef;
} }
return return
{ url => $url { url => $url
@ -46,7 +46,7 @@ sub getInfoFrom {
, narHash => $narHash , narHash => $narHash
, narSize => $narSize , narSize => $narSize
, refs => [ map { "$Nix::Config::storeDir/$_" } @refs ] , refs => [ map { "$Nix::Config::storeDir/$_" } @refs ]
, deriver => "$Nix::Config::storeDir/$deriver" , deriver => defined $deriver ? "$Nix::Config::storeDir/$deriver" : undef
} }
} }
@ -80,9 +80,18 @@ sub downloadBinary {
print STDERR "unknown compression method ‘$info->{compression}’\n"; print STDERR "unknown compression method ‘$info->{compression}’\n";
next; next;
} }
if (system("$Nix::Config::curl --fail --location $binaryCacheUrl/$info->{url} | $decompressor | $Nix::Config::binDir/nix-store --restore $storePath") == 0) { if (system("$Nix::Config::curl --fail --location $binaryCacheUrl/$info->{url} | $decompressor | $Nix::Config::binDir/nix-store --restore $storePath") != 0) {
return 1; die "download of `$info->{url}' failed" . ($! ? ": $!" : "") . "\n" unless $? == 0;
next;
} }
# The hash in the manifest can be either in base-16 or
# base-32. Handle both.
$info->{narHash} =~ /^sha256:(.*)$/ or die "invalid hash";
my $hash = $1;
my $hash2 = hashPath("sha256", 1, $storePath);
die "hash mismatch in downloaded path ‘$storePath’; expected $hash, got $hash2\n"
if $hash ne $hash2;
return 1;
} }
} }
@ -112,7 +121,7 @@ if ($ARGV[0] eq "--query") {
print scalar @{$info->{refs}}, "\n"; print scalar @{$info->{refs}}, "\n";
print "$_\n" foreach @{$info->{refs}}; print "$_\n" foreach @{$info->{refs}};
print $info->{fileSize} || 0, "\n"; print $info->{fileSize} || 0, "\n";
print $info->{narSize}, "\n"; print $info->{narSize} || 0, "\n";
} else { } else {
print "0\n"; print "0\n";
} }