switch from md5sum to sha1 for security reasons (we will sign the .sha1 file afterwards)
authorAdrian Schröter <adrian@suse.de>
Sun, 17 Jan 2010 08:51:11 +0000 (09:51 +0100)
committerAdrian Schröter <adrian@suse.de>
Sun, 17 Jan 2010 08:51:11 +0000 (09:51 +0100)
build_kiwi.sh

index d2ba624..b4132dc 100644 (file)
@@ -126,25 +126,25 @@ run_kiwi()
                        --exclude=$imagename.$imagearch-$imageversion.iso \
                        --exclude=$imagename.$imagearch-$imageversion.raw \
                        * || cleanup_and_exit 1
-                   md5sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-raw.tar.bz2 \
-                       > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-raw.tar.bz2.md5" || cleanup_and_exit 1
+                   sha1sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-raw.tar.bz2 \
+                       > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-raw.tar.bz2.sha1" || cleanup_and_exit 1
                    if [ -e $imagename.$imagearch-$imageversion.iso ]; then
-                     echo "Copy iso file and create md5..."
+                     echo "Copy iso file and create sha1..."
                      mv $imagename.$imagearch-$imageversion.iso \
                         $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum.iso || cleanup_and_exit 1
                              pushd $BUILD_ROOT/$TOPDIR/KIWI > /dev/null
-                     md5sum $imagename.$imagearch-$imageversion$buildnum.iso \
-                            > "$imagename.$imagearch-$imageversion$buildnum.iso.md5" || cleanup_and_exit 1
+                     sha1sum $imagename.$imagearch-$imageversion$buildnum.iso \
+                            > "$imagename.$imagearch-$imageversion$buildnum.iso.sha1" || cleanup_and_exit 1
                      popd > /dev/null
                    fi
                    if [ -e $imagename.$imagearch-$imageversion.raw ]; then
-                     echo "Copy raw file and create md5..."
+                     echo "Copy raw file and create sha1..."
                      mv $imagename.$imagearch-$imageversion.raw \
                         $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum.raw || cleanup_and_exit 1
                              pushd $BUILD_ROOT/$TOPDIR/KIWI > /dev/null
                      bzip2 $imagename.$imagearch-$imageversion$buildnum.raw && \
-                     md5sum $imagename.$imagearch-$imageversion$buildnum.raw.bz2 \
-                            > "$imagename.$imagearch-$imageversion$buildnum.raw.bz2.md5" || cleanup_and_exit 1
+                     sha1sum $imagename.$imagearch-$imageversion$buildnum.raw.bz2 \
+                            > "$imagename.$imagearch-$imageversion$buildnum.raw.bz2.sha1" || cleanup_and_exit 1
                      popd > /dev/null
                    fi
                    popd > /dev/null
@@ -160,8 +160,8 @@ run_kiwi()
                    done
                    tar cvjfS $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-vmx.tar.bz2 \
                        $FILES || cleanup_and_exit 1
-                   md5sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-vmx.tar.bz2 \
-                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-vmx.tar.bz2.md5" || cleanup_and_exit 1
+                   sha1sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-vmx.tar.bz2 \
+                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-vmx.tar.bz2.sha1" || cleanup_and_exit 1
                    popd > /dev/null
                    ;;
                xen)
@@ -173,8 +173,8 @@ run_kiwi()
                        $imagename.$imagearch-$imageversion.xenconfig \
                        $imagename.$imagearch-$imageversion || cleanup_and_exit 1
                    popd > /dev/null
-                   md5sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-xen.tar.bz2 \
-                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-xen.tar.bz2.md5" || cleanup_and_exit 1
+                   sha1sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-xen.tar.bz2 \
+                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-xen.tar.bz2.sha1" || cleanup_and_exit 1
                    ;;
                pxe)
                    pushd $BUILD_ROOT/$TOPDIR/KIWI-pxe > /dev/null
@@ -183,16 +183,16 @@ run_kiwi()
                                $imagename.$imagearch-$imageversion* \
                                initrd-* || cleanup_and_exit 1
                    popd > /dev/null
-                   md5sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-pxe.tar.bz2 \
-                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-pxe.tar.bz2.md5" || cleanup_and_exit 1
+                   sha1sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-pxe.tar.bz2 \
+                            > "$BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-pxe.tar.bz2.sha1" || cleanup_and_exit 1
                    ;;
                iso)
                    pushd $BUILD_ROOT/$TOPDIR/KIWI-iso > /dev/null
-                   echo "creating md5 sum for iso images... "
+                   echo "creating sha1 sum for iso images... "
                    for i in *.iso; do
                        pushd $BUILD_ROOT/$TOPDIR/KIWI/ > /dev/null
                        mv $BUILD_ROOT/$TOPDIR/KIWI-iso/$i ${i%.iso}$buildnum.iso || cleanup_and_exit 1
-                       md5sum ${i%.iso}$buildnum.iso > ${i%.iso}$buildnum.iso.md5 || cleanup_and_exit 1
+                       sha1sum ${i%.iso}$buildnum.iso > ${i%.iso}$buildnum.iso.sha1 || cleanup_and_exit 1
                        popd > /dev/null
                    done
                    popd > /dev/null
@@ -202,8 +202,8 @@ run_kiwi()
                    echo "compressing unkown images... "
                    tar cvjfS $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-$imgtype.tar.bz2 \
                        * || cleanup_and_exit 1
-                   md5sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-$imgtype.tar.bz2 \
-                       > $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-$imgtype.tar.bz2.md5 || cleanup_and_exit 1
+                   sha1sum $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-$imgtype.tar.bz2 \
+                       > $BUILD_ROOT/$TOPDIR/KIWI/$imagename.$imagearch-$imageversion$buildnum-$imgtype.tar.bz2.sha1 || cleanup_and_exit 1
                            popd > /dev/null
                    ;;
            esac