Correct way to validate the kubeseal tarball with Ansible about sealed-secrets HOT 4 CLOSED

Hi, @fmunteanu.

The .sig file contains the signature by Cosign. You can find the checksums for the different tarballs in the sealed-secrets_VERSION_checksums.txt file for each release. For example, the checksums for version 0.24.5 can be found here.

Regards,
Alejandro

from sealed-secrets.

@alemorcuq would it be possible to separate each checksum into dedicated files, like other GitHub releases do?

Example:
https://github.com/cilium/hubble/releases/download/v0.12.3/hubble-linux-arm.tar.gz.sha256sum

The above format will also allow us to easily identify the required checksum validation.

from sealed-secrets.

This Issue has been automatically marked as "stale" because it has not had recent activity (for 15 days). It will be closed if no further activity occurs. Thanks for the feedback.

from sealed-secrets.

I'm not familiar with the Ansible way, you can easily check the checksum with sha256sum:

$ sha256sum -c sealed-secrets_0.25.0_checksums.txt --ignore-missing
kubeseal-0.25.0-linux-amd64.tar.gz: OK

Just make sure the checksums file and the tarball are in the same directory.

from sealed-secrets.