logo

bootstrap-initrd

Linux initrd to bootstrap from a small binary seed git clone https://anongit.hacktivis.me/git/bootstrap-initrd.git/
commit: b73f8a670920c994dea274d8f3ad02c8d7fa9fe8
parent 4e5edcbfc6dcd7c82fe09439fdd91b373c5156b7
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Fri, 20 Dec 2024 03:11:42 +0100

add signify verification of utils-std-0.0.1

So far it's also the only one verifiable via signify,
others projects are using OpenPGP, which is pretty much unusable
in a bootstrapping context.

Diffstat:

Mdistfiles.SHA512SUM2++
Mfetch.sh7+++++++
2 files changed, 9 insertions(+), 0 deletions(-)

diff --git a/distfiles.SHA512SUM b/distfiles.SHA512SUM @@ -7,6 +7,7 @@ f9ed25683cfc6c4abe7f1203a2b82ed101ee4c9e0f9ab60755b6a09c8d1e8e4f64d413624e7bb9c4 0b30b0f4c4c92a10ee2da263ea44666f445d96bac86ca4afb7bbb50d8278986e4145a7bcdf3ed9f75611bb956e93e16fc0e19874498ce3ae1a00e6fbb4f910c9 distfiles/heirloom-070715.tar.bz2 1f1f10a7b49402053172cc028bbd939a46fcf933994cb867fa40e8c5bbd7b1291575b3bac254cd79dc4fce3e3a2c88fe0f890449888fda16169c8e6a2540f055 distfiles/heirloom-devtools-070527.tar.bz2 8afbce28e3db544226987ae1979cf148515ba6a7e4a5c6beb1e58c05f3c6d01bbe81410b81ef32bea9a45788c86c7094130f56cb3f95c732906c02c05de1a370 distfiles/iproute2-6.6.0.tar.gz +1f1b2799366cc24689469860f42babf529e210e950c804934e47fac12916d127bcba0e90de3f0e71c0ec2cf61a45070058a4a4ecdee3ebb09c1e2503db263d2d distfiles/lanodan-2024.pub e347a10cc737477353a9417473c5b40c864b3f631708eb8d169823814879b976cebcb80a47808d53051d6163e3fea3b5c3bf2d6c16c9df5cacca43d30ac24a6f distfiles/linux-headers-6.6-r1.apk.aarch64 5dde4b15f0abb078eca665499b371ba30b938804c4296874f019c2ef13a1604b1bca0cbc0cc8b4cdf925ffa5c30dd91b7c40112349ea72525dcf09146b2b8c2a distfiles/linux-headers-6.6-r1.apk.armhf 2c180f6ffb4bc284ecdd4552edd53f67552fc4885384a832e8eb0ae24eeada76837a6c11c708f89d28576f8c0a03c1d2cfb3aa300a7f877e9f4834cc6432ae06 distfiles/linux-headers-6.6-r1.apk.armv7 @@ -68,6 +69,7 @@ a3c3156dd4d967aae42cab8bf2c00746bb37be0e44276f6b0c90e32daafad66a3ef3945c5460fbb6 095ce111d74a9d296e1e3431a0733e028d234f0ef1e1d6839ee64cc3ac3b90c9a7c918b980c17bb1f17dfbd96794884219484eafd8e36eba5c7eae4d4ba85261 distfiles/tcc-libs-static-0.9.27_git20241020-r1.apk.x86_64 ccb62313eaf2fb149ba3a372ab6a0cccde2fc23e2193843f457b9ed181b832fddb34fe23b18ec3005aefb7d1137fcb440fb57462b9414734f3b1a90183d3db36 distfiles/tiny-curl-8.4.0.tar.gz b78d9adeca16187956fa32ca1743d8e707cba4aa543979243e4abe6a958c5892ef1b26982b45da50724e5af0ee31109d7d05c66751a21c77f06f04b7a56f8001 distfiles/utils-std-0.0.1.tar.gz +f09323b4c599ee4e917fd880f21bfc4ed956382eab63fa4ff4d47e63b79b6f3522cd57ae4451720e6bfc5f7e25ba7f194aa667c1d03b6426d360666922294603 distfiles/utils-std-0.0.1.tar.gz.sign c32c32c95e3541b906e0284e66a953ace677e0ce6af2084e7b122600047bf7542c1b0fabb5909b19ff79fba6def530be674df1c675b22a47a8d57f3f0b736a82 distfiles/xz-5.6.2.tar.gz e186a8fc01871414574fd5e90e8ce87a45bcf40aa0d7276bd90a301ee8c312be3a0adb580fc2c8b6653fbeeda1ce4dfdd078095a5fc77e70263e5e940414dc54 distfiles/yacc-oyacc-6.6.tar.gz 580677aad97093829090d4b605ac81c50327e74a6c2de0b85dd2e8525553f3ddde17556ea46f8f007f89e435493c9a20bc997d1ef1c1c2c23274528e3c46b94f distfiles/zlib-1.3.1.tar.gz diff --git a/fetch.sh b/fetch.sh @@ -1,6 +1,7 @@ #!/bin/sh URLS=" https://hacktivis.me/releases/utils-std/utils-std-0.0.1.tar.gz + https://hacktivis.me/releases/utils-std/utils-std-0.0.1.tar.gz.sign https://frippery.org/make/pdpmake-2.0.1.tgz https://gitlab.com/bzip2/bzip2/-/archive/bzip2-1.0.8/bzip2-bzip2-1.0.8.tar.gz https://zlib.net/zlib-1.3.1.tar.gz @@ -50,6 +51,8 @@ do done done +test -e lanodan-2024.pub || curl ${CURL_OPTS} -o lanodan-2024.pub https://hacktivis.me/releases/signify/2024.pub + # Only has ./CVS and .travis-ci.yml removed compared to Github autogenerated tarball #test -e om4-6.7.tar.gz || curl ${CURL_OPTS} -o om4-6.7.tar.gz https://github.com/ibara/m4/releases/download/om4-6.7/om4-6.7.tar.gz @@ -65,6 +68,10 @@ test -e gettext-tiny-0.3.2.tar.gz || curl ${CURL_OPTS} -o gettext-tiny-0.3.2.tar # suckless.org doesn't provides snapshots of sbase (yet?) test -e sbase-b30fb568.tar.gz || curl ${CURL_OPTS} -o sbase-b30fb568.tar.gz https://git.sr.ht/~mcf/sbase/archive/b30fb56804bfed69b45ef0e944d2e029e4d26258.tar.gz +if command -v signify >/dev/null; then + signify -V -p lanodan-2024.pub -x utils-std-0.0.1.tar.gz.sign -m utils-std-0.0.1.tar.gz +fi + cd - sha512sum -c distfiles.SHA512SUM