update release verification script for latest docker

This commit is contained in:
Michael Eischer 2024-06-07 21:00:10 +02:00
parent b82ecc6425
commit 08c43d2c7e
2 changed files with 4 additions and 3 deletions

View file

@ -123,7 +123,7 @@ The specified go compiler version must match the one used to build the official
binaries. For example, for restic 0.16.2 the command would be binaries. For example, for restic 0.16.2 the command would be
``helpers/verify-release-binaries.sh 0.16.2 1.21.3``. ``helpers/verify-release-binaries.sh 0.16.2 1.21.3``.
The script requires bash, curl, docker, git, gpg, shasum and tar. The script requires bash, curl, docker (version >= 25.0), git, gpg, shasum and tar.
The script first downloads all release binaries, checks the SHASUM256 file and its The script first downloads all release binaries, checks the SHASUM256 file and its
signature. Afterwards it checks that the tarball matches the restic git repository signature. Afterwards it checks that the tarball matches the restic git repository

View file

@ -89,13 +89,14 @@ extract_docker() {
restic_platform=$3 restic_platform=$3
out=restic_${restic_version}_linux_${restic_platform}.bz2 out=restic_${restic_version}_linux_${restic_platform}.bz2
# requires at least docker 25.0
docker image pull --platform "linux/${docker_platform}" ${image}:${restic_version} > /dev/null docker image pull --platform "linux/${docker_platform}" ${image}:${restic_version} > /dev/null
docker image save ${image}:${restic_version} -o docker.tar docker image save ${image}:${restic_version} -o docker.tar
mkdir img mkdir img
tar xvf docker.tar -C img --wildcards \*/layer.tar > /dev/null tar xvf docker.tar -C img --wildcards blobs/sha256/\* > /dev/null
rm docker.tar rm docker.tar
for i in img/*/layer.tar; do for i in img/blobs/sha256/*; do
tar -xvf "$i" -C img usr/bin/restic 2> /dev/null 1>&2 || true tar -xvf "$i" -C img usr/bin/restic 2> /dev/null 1>&2 || true
if [[ -f img/usr/bin/restic ]]; then if [[ -f img/usr/bin/restic ]]; then
if [[ -f restic-docker ]]; then if [[ -f restic-docker ]]; then