WebSum is a next-gen integrity checker written in Rust.

It can be used for finding out what an installation image contains or just validating it!

# Arch Linux
yay -S websum-bin

# Other
cargo install websum

The usage is pretty much the same as other tools like sha256sum

$ websum ./installation.iso

Example (Successful):

$ websum ./arch.iso
Processing...
SHA256: 55284A14F71DF3E1E45A1E732097F2CA0034C0FC0D912E58812C2EEDEDA0828F
This file is a valid "archlinux-2024.08.01-x86_64.iso" file.

Example (Unsuccessful):

$ websum ./random.iso
Processing...
SHA256: 59AFA864CE54B70CADFFE846A251CB8462E868188154CBB1BABFA92BEBF1C2A0
This file is not found in our archive! It is either invalid or not in our archive.

WebSum firstly gets the sha256 hash of the file that is given as an argument. Then the result sha256 is used to set a url to the archive directory in this repository. (if the default server is used)

https://raw.githubusercontent.com/yilmaz08/websum/main/archive/%h (%h is replaced with sha256 hash)

and if the hash has been saved before, it contains the name of the file inside.

Finally, the HTTP response is used to print final response.

The archive can also be used manually by getting the hash with sha256 and visiting the raw file on the browser (or with curl).

WebSum is open source and we welcome any contributions.

You can either improve/fix the code or update hashes from the archive.

• Open an issue to discuss your proposed changes if it changes the source code. (When you only change the archive, you don't need an issue beforehand.)
• Fork the repository and make needed changes on the forked repository. (If you split changes into different commits, it would be better.)
• Open a pull request to merge your changes into the main WebSum repository.

We appreciate any contributions, no matter how small!