You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
Checking the release_checksum on alpine-based images fails.
The --release parameter in the build command creates a release_checksum file. The content looks like the following <sha256sum><space><file_name>. See here in the code.
From the sha256sum man page: See here.
The sums are computed as described in FIPS-180-2. When checking, the input should be a former output of this program. The default mode is to print a line with checksum, a character indicating type ('*' for binary, ' ' for text), and name for each FILE.
So, in this case, the content of the checksum file should be <sha256sum><space><space><file_name>.
Alpine is very strict when it comes to checking the format of checksums. Debian-based images tolerate this, so it does not fail there. To reproduce
Steps to reproduce the behavior:
Describe the bug
Checking the
release_checksum
on alpine-based images fails.The
--release
parameter in thebuild
command creates arelease_checksum
file. The content looks like the following<sha256sum><space><file_name>
. See here in the code.From the sha256sum man page: See here.
So, in this case, the content of the checksum file should be
<sha256sum><space><space><file_name>
.Alpine is very strict when it comes to checking the format of checksums. Debian-based images tolerate this, so it does not fail there.
To reproduce
Steps to reproduce the behavior:
cat release_checksum | sha256sum -c -w -
Output:
As a reference, this is how it looks for Debian-based images:
cat release_checksum | sha256sum -c -w -
Output:
What version are you using?
All versions, code was not changed since it was introduced.
The text was updated successfully, but these errors were encountered: