Merge pull request #304318 from superherointj/fluxcd-update-script-use-sri-hash
fluxcd: use SRI hash in update script
This commit is contained in:
commit
7d7fedcede
|
@ -8,8 +8,8 @@
|
||||||
|
|
||||||
let
|
let
|
||||||
version = "2.2.3";
|
version = "2.2.3";
|
||||||
sha256 = "12rrai56hl86213lsi8i4qrah0v7a36nks38g5373imyl9g497ym";
|
sha256 = "sha256-1Z9EXqK+xnFGeWjoac1QZwOoMiYRRU1HEAZRaEpUOYs=";
|
||||||
manifestsSha256 = "1hmzmzijpx49hh2ykv7vw3jp02dxr4qn3r1dma56g7b4nbk7aa8x";
|
manifestsSha256 = "sha256-HSl15rJknWeKqi3kYTHJvQlw5eD77OkFhIn0K+Ovv8I=";
|
||||||
|
|
||||||
manifests = fetchzip {
|
manifests = fetchzip {
|
||||||
url =
|
url =
|
||||||
|
|
|
@ -12,7 +12,9 @@ LATEST_VERSION=$(echo ${LATEST_TAG} | sed 's/^v//')
|
||||||
|
|
||||||
if [ ! "$OLD_VERSION" = "$LATEST_VERSION" ]; then
|
if [ ! "$OLD_VERSION" = "$LATEST_VERSION" ]; then
|
||||||
SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/archive/refs/tags/${LATEST_TAG}.tar.gz)
|
SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/archive/refs/tags/${LATEST_TAG}.tar.gz)
|
||||||
|
SHA256=$(nix hash to-sri --type sha256 $SHA256)
|
||||||
SPEC_SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/releases/download/${LATEST_TAG}/manifests.tar.gz)
|
SPEC_SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/releases/download/${LATEST_TAG}/manifests.tar.gz)
|
||||||
|
SPEC_SHA256=$(nix hash to-sri --type sha256 $SPEC_SHA256)
|
||||||
|
|
||||||
setKV () {
|
setKV () {
|
||||||
sed -i "s|$1 = \".*\"|$1 = \"${2:-}\"|" "${FLUXCD_PATH}/default.nix"
|
sed -i "s|$1 = \".*\"|$1 = \"${2:-}\"|" "${FLUXCD_PATH}/default.nix"
|
||||||
|
|
Loading…
Reference in New Issue
Block a user