mirror of
https://github.com/actions/runner-images-sangeeth.git
synced 2025-12-20 06:29:50 +00:00
[Ubuntu] Add more checksum validations (#8660)
This commit is contained in:
@@ -1,12 +1,20 @@
|
||||
#!/bin/bash -e
|
||||
################################################################################
|
||||
## File: docker-compose.sh
|
||||
## Desc: Installs Docker Compose
|
||||
## Desc: Installs Docker Compose v1
|
||||
## Supply chain security: Docker Compose v1 - checksum validation
|
||||
################################################################################
|
||||
|
||||
# Source the helpers for use with the script
|
||||
source $HELPER_SCRIPTS/install.sh
|
||||
|
||||
# Install docker-compose v1 from releases
|
||||
URL="https://github.com/docker/compose/releases/download/1.29.2/docker-compose-Linux-x86_64"
|
||||
curl -fsSL $URL -o /usr/local/bin/docker-compose
|
||||
chmod +x /usr/local/bin/docker-compose
|
||||
curl -fsSL "${URL}" -o /tmp/docker-compose-v1
|
||||
|
||||
# Supply chain security - Docker Compose v1
|
||||
external_hash=$(get_hash_from_remote_file "${URL}.sha256" "compose-Linux-x86_64")
|
||||
use_checksum_comparison "/tmp/docker-compose-v1" "${external_hash}"
|
||||
install /tmp/docker-compose-v1 /usr/local/bin/docker-compose
|
||||
|
||||
invoke_tests "Tools" "Docker-compose v1"
|
||||
|
||||
Reference in New Issue
Block a user