From: Gordon Hecker <gh@emlix.com>
Date: Wed, 28 Oct 2009 14:07:40 +0000 (+0100)
Subject: chroot: actually verify checksum for chroot tarballs
X-Git-Tag: e2factory-2.3.2rc1~17
X-Git-Url: https://git.e2factory.org/?a=commitdiff_plain;h=8cc0be8c882a094ec4273797ca888bd37597b2bd;p=e2factory.git

chroot: actually verify checksum for chroot tarballs

Signed-off-by: Gordon Hecker <gh@emlix.com>
---

diff --git a/local/e2build.lua b/local/e2build.lua
index 56b66bd..fd68a43 100644
--- a/local/e2build.lua
+++ b/local/e2build.lua
@@ -272,6 +272,12 @@ function e2build.setup_chroot(info, r, return_flags)
 	if not path then
 	  return false, e:cat(re)
 	end
+	if f.sha1 then
+		rc, re = e2tool.verify_hash(info, f.server, f.location, f.sha1)
+		if not rc then
+			return false, e:cat(re)
+		end
+	end
 	local tartype
 	if path:match("tgz$") or path:match("tar.gz$") then
 		tartype = "tar.gz"