Browse code

Merge "Use sha256sum instead of gpg for verification"

Jenkins authored on 2017/05/24 23:57:29
Showing 1 changed files
... ...
@@ -29,6 +29,10 @@ ETCD_VERSION=${ETCD_VERSION:-v3.1.7}
29 29
 ETCD_DATA_DIR="$DEST/data/etcd"
30 30
 ETCD_SYSTEMD_SERVICE="devstack@etcd.service"
31 31
 ETCD_BIN_DIR="$DEST/bin"
32
+ETCD_SHA256_AMD64="4fde194bbcd259401e2b5c462dfa579ee7f6af539f13f130b8f5b4f52e3b3c52"
33
+# NOTE(sdague): etcd v3.1.7 doesn't have anything for these architectures, though 3.2.0 does.
34
+ETCD_SHA256_ARM64=""
35
+ETCD_SHA256_PPC64=""
32 36
 
33 37
 if is_ubuntu ; then
34 38
     UBUNTU_RELEASE_BASE_NUM=`lsb_release -r | awk '{print $2}' | cut -d '.' -f 1`
... ...
@@ -97,14 +101,19 @@ function _install_etcd {
97 97
     # Make sure etcd3 downloads the correct architecture
98 98
     if is_arch "x86_64"; then
99 99
         ETCD_ARCH="amd64"
100
+        ETCD_SHA256=${ETCD_SHA256:-$ETCD_SHA256_AMD64}
100 101
     elif is_arch "aarch64"; then
101 102
         ETCD_ARCH="arm64"
103
+        ETCD_SHA256=${ETCD_SHA256:-$ETCD_SHA256_ARM64}
102 104
     elif is_arch "ppc64le"; then
103 105
         ETCD_ARCH="ppc64le"
106
+        ETCD_SHA256=${ETCD_SHA256:-$ETCD_SHA256_PPC64}
104 107
     else
105 108
         exit_distro_not_supported "invalid hardware type - $ETCD_ARCH"
106 109
     fi
107 110
 
111
+    ETCD_NAME=etcd-$ETCD_VERSION-linux-$ETCD_ARCH
112
+
108 113
     # Install the libraries needed. Note: tooz for example does not have a hard dependency on these libraries
109 114
     pip_install etcd3
110 115
     pip_install etcd3gw
... ...
@@ -114,21 +123,18 @@ function _install_etcd {
114 114
     sudo mkdir -p $ETCD_DATA_DIR
115 115
 
116 116
     # Download and cache the etcd tgz for subsequent use
117
-    if [ ! -f "$DEST/etcd/etcd-$ETCD_VERSION-linux-$ETCD_ARCH/etcd" ]; then
118
-        mkdir -p $DEST/etcd
119
-        ETCD_DOWNLOAD_FILE=etcd-$ETCD_VERSION-linux-$ETCD_ARCH.tar.gz
120
-        wget $ETCD_DOWNLOAD_URL/$ETCD_VERSION/$ETCD_DOWNLOAD_FILE -O $DEST/etcd/$ETCD_DOWNLOAD_FILE
121
-        wget $ETCD_DOWNLOAD_URL/$ETCD_VERSION/$ETCD_DOWNLOAD_FILE.asc -O $DEST/etcd/$ETCD_DOWNLOAD_FILE.asc
122
-
123
-        # use gpg to verify the artifact, use a backup key server in case the first one is down for some reason
124
-        gpg --keyserver hkps.pool.sks-keyservers.net --recv-key FC8A365E || gpg --keyserver pgpkeys.mit.edu --recv-key FC8A365E
125
-        gpg --verify $DEST/etcd/$ETCD_DOWNLOAD_FILE.asc $DEST/etcd/$ETCD_DOWNLOAD_FILE
126
-
127
-        tar xzvf $DEST/etcd/$ETCD_DOWNLOAD_FILE -C $DEST/etcd
128
-        sudo cp $DEST/etcd/etcd-$ETCD_VERSION-linux-$ETCD_ARCH/etcd $ETCD_BIN_DIR/etcd
117
+    if [ ! -f "files/etcd-$ETCD_VERSION-linux-$ETCD_ARCH/etcd" ]; then
118
+        ETCD_DOWNLOAD_FILE=$ETCD_NAME.tar.gz
119
+        wget $ETCD_DOWNLOAD_URL/$ETCD_VERSION/$ETCD_DOWNLOAD_FILE -O files/$ETCD_DOWNLOAD_FILE
120
+        echo "${ETCD_SHA256} files/${ETCD_DOWNLOAD_FILE}" > files/etcd.sha256sum
121
+        # NOTE(sdague): this should go fatal if this fails
122
+        sha256sum -c files/etcd.sha256sum
123
+
124
+        tar xzvf files/$ETCD_DOWNLOAD_FILE -C files
125
+        sudo cp files/$ETCD_NAME/etcd $ETCD_BIN_DIR/etcd
129 126
     fi
130 127
     if [ ! -f "$ETCD_BIN_DIR/etcd" ]; then
131
-        sudo cp $DEST/etcd/etcd-$ETCD_VERSION-linux-$ETCD_ARCH/etcd $ETCD_BIN_DIR/etcd
128
+        sudo cp files/$ETCD_NAME/etcd $ETCD_BIN_DIR/etcd
132 129
     fi
133 130
 }
134 131