chroot: actually verify checksum for chroot tarballs

Signed-off-by: Gordon Hecker <gh@emlix.com>

diff --git a/local/e2build.lua b/local/e2build.lua
index 56b66bd12ffbe84b69c236d1b662493120df2f20..fd68a4350bb7178e7888479d8d22e32f89ffc9c5 100644 (file)
--- a/local/e2build.lua
+++ b/local/e2build.lua
@@ -272,6 +272,12 @@ function e2build.setup_chroot(info, r, return_flags)
        if not path then
          return false, e:cat(re)
        end
+       if f.sha1 then
+               rc, re = e2tool.verify_hash(info, f.server, f.location, f.sha1)
+               if not rc then
+                       return false, e:cat(re)
+               end
+       end
        local tartype
        if path:match("tgz$") or path:match("tar.gz$") then
                tartype = "tar.gz"