3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-05-09 15:17:39 +02:00
Code Issues Projects Releases Packages Wiki Activity

envoy: validate binary checksum (#1908)

Browse source 
* envoy: validate binary checksum

* address comments

* change to info

* fix order
This commit is contained in:
Caleb Doxsey 2021-02-18 15:22:46 -07:00 • committed by GitHub
parent cc5335bd7f
commit b1871b0f2e
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
6 changed files with 102 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

32
scripts/embed-envoy.bash
View file

@ -2,42 +2,16 @@
set -euo pipefail
BINARY=$1
ENVOY_VERSION=1.16.2
DIR=$(dirname "${BINARY}")
TARGET="${TARGET:-"$(go env GOOS)_$(go env GOARCH)"}"
if [[ "${TARGET}" == darwin_* ]]; then
ENVOY_PLATFORM="darwin"
elif [[ "${TARGET}" == linux_* ]]; then
ENVOY_PLATFORM="linux_glibc"
else
echo "unsupported TARGET: ${TARGET}"
exit 1
fi
## TODO we should be able to replace this with a utility that consumes
## https://godoc.org/github.com/tetratelabs/getenvoy/pkg/binary/envoy
## https://golang.org/pkg/archive/zip/#Writer.SetOffset
export PATH=$PATH:$(go env GOPATH)/bin
if [ "$TARGET" == "linux_arm64" ]; then
ENVOY_PATH="$DIR/$TARGET"
mkdir -p "$ENVOY_PATH"
curl -L -o "$ENVOY_PATH/envoy" https://github.com/pomerium/envoy-binaries/releases/download/v${ENVOY_VERSION}/envoy-linux-arm64
else
env HOME="${DIR}" getenvoy fetch standard:${ENVOY_VERSION}/${ENVOY_PLATFORM}
ENVOY_PATH=${DIR}/.getenvoy/builds/standard/${ENVOY_VERSION}/${ENVOY_PLATFORM}/bin
fi
ARCHIVE="${ENVOY_PATH}/envoy.zip"
(
cd "${ENVOY_PATH}"
cd "$DIR"
zip envoy.zip envoy
)
echo "appending ${ARCHIVE} to ${BINARY}"
echo "appending $DIR/envoy.zip to ${BINARY}"
if [ "$(unzip -z -qq "$BINARY" 2>&1)" != "" ]; then
cat "${ARCHIVE}" >>"${BINARY}"
cat "$DIR/envoy.zip" >>"${BINARY}"
fi
zip -A "${BINARY}"