pyrox.dev
linux_latest-libre: refactor update script to use SRI hashes
philiptaron.tngl.sh
+4
-4
pkgs/os-specific/linux/kernel/update-libre.sh
+4
-4
pkgs/os-specific/linux/kernel/update-libre.sh
···
6
6
path="$nixpkgs/pkgs/os-specific/linux/kernel/linux-libre.nix"
7
7
8
8
old_rev="$(grep -o 'rev = ".*"' "$path" | awk -F'"' '{print $2}')"
9
-
old_sha256="$(grep -o 'sha256 = ".*"' "$path" | awk -F'"' '{print $2}')"
10
9
11
10
svn_url=https://www.fsfla.org/svn/fsfla/software/linux-libre/releases/branches/
12
11
rev="$(curl -s "$svn_url" | grep -Em 1 -o 'Revision [0-9]+' | awk '{print $2}')"
···
16
15
exit 0
17
16
fi
18
17
18
+
old_hash="$(grep -o 'hash = ".*"' "$path" | awk -F'"' '{print $2}')"
19
19
sha256="$(QUIET=1 nix-prefetch-svn "$svn_url" "$rev" | tail -1)"
20
+
new_hash="$(nix --extra-experimental-features nix-command hash convert --to sri --hash-algo sha256 "$sha256")"
20
21
21
-
if [ "$old_sha256" = "$sha256" ]; then
22
+
if [ "$old_hash" = "$new_hash" ]; then
22
23
echo "No updates for linux-libre"
23
24
exit 0
24
25
fi
25
26
26
-
sed -i -e "s/rev = \".*\"/rev = \"$rev\"/" \
27
-
-e "s/sha256 = \".*\"/sha256 = \"$sha256\"/" "$path"
27
+
sed -i -e "s,rev = \".*\",rev = \"$rev\",; s,hash = \".*\",hash = \"$new_hash\"," "$path"
28
28
29
29
if [ -n "${COMMIT-}" ]; then
30
30
git commit -qm "linux_latest-libre: $old_rev -> $rev" "$path" \