|
|
|
@@ -41,12 +41,12 @@ the first two lines. |
|
|
|
|
|
|
|
Setting up and verifying a snapshot or release: |
|
|
|
``` |
|
|
|
$wget https://www.funkthat.com/gitea/jmg/snapaid/raw/branch/master/snapaid.sh |
|
|
|
$chmod 755 snapaid.sh |
|
|
|
$./snapaid.sh verify FreeBSD-12.2-RELEASE-amd64-mini-memstick.img.xz |
|
|
|
$ wget https://www.funkthat.com/gitea/jmg/snapaid/raw/branch/master/snapaid.sh |
|
|
|
$ chmod 755 snapaid.sh |
|
|
|
$ ./snapaid.sh verify FreeBSD-12.2-RELEASE-amd64-mini-memstick.img.xz |
|
|
|
``` |
|
|
|
|
|
|
|
Note that the provided filename MUST match exactly the released name so |
|
|
|
Note that the provided filename *MUST* match exactly the released name so |
|
|
|
that it can be found in the index. It could be possible in the future |
|
|
|
to find it via shasum, but that is not implemented yet. |
|
|
|
|
|
|
|
@@ -74,16 +74,16 @@ backend |
|
|
|
------- |
|
|
|
|
|
|
|
The backend is just a simple text file which indexes all the published |
|
|
|
snapshots. It is built from the emails to the freebsd-snapshot |
|
|
|
list. After verification of the email's signature, the SHA512 entry |
|
|
|
lines are extracted, the file name is parsed, and added to the complete |
|
|
|
index. The message-id of the email is in the index so that the frontend |
|
|
|
can d/l the original email and verify the GPG signature locally. The |
|
|
|
complete index is used for verifying a snapshot that has already been |
|
|
|
downloaded. Another index is also maintained which only contains the |
|
|
|
currently available to d/l snapshots. This may contain snapshots that |
|
|
|
no longer exist, as it is only updated/checked when a new snapshot is |
|
|
|
released. |
|
|
|
snapshots. It is built from the emails to the freebsd-snapshot and |
|
|
|
freebsd-announce lists. After verification of the email's signature, |
|
|
|
the SHA512 entry lines are extracted, the file name is parsed, and added |
|
|
|
to the complete index. The message-id of the email is in the index so |
|
|
|
that the frontend can download the original email and verify the GPG |
|
|
|
signature locally. The complete index is used for verifying a snapshot |
|
|
|
that has already been downloaded. Another index is also maintained |
|
|
|
which only contains the currently available to download snapshots. This |
|
|
|
may contain snapshots that no longer exist, as it is only |
|
|
|
updated/checked when a new snapshot is released. |
|
|
|
|
|
|
|
The procmail rc lines that I use: |
|
|
|
``` |
|
|
|
@@ -108,6 +108,6 @@ so that a later rule can file them in the proper mailbox. The second rule |
|
|
|
is for the snapshots, and smiilarly organized, but the mailbox filing |
|
|
|
happens here. |
|
|
|
|
|
|
|
The snapwrap.sh script is included in the repo, but the command to deploy |
|
|
|
The `snapwrap.sh` script is included in the repo, but the command to deploy |
|
|
|
the database to the FreeBSD.org servers has been deleted, but it is a |
|
|
|
simple: `tar -cf - <files> | ssh freefall tar -xf -` type command. |
