WhiteBeam icon indicating copy to clipboard operation
WhiteBeam copied to clipboard

Packaging through WhiteBeam installer produces incorrect hash file

Open noproto opened this issue 3 years ago • 1 comments

The resulting .SHA256 file produced by cargo run package contains a relative path to the WhiteBeam package, which will produce an error when run through sha256sum -c (or equivalent command).

Erroneous output:

$ cat WhiteBeam_0.2.6_aarch64.SHA256
e192e16265df05403a7aaa544234f74bf7f1957ada5ac7042b06ff1bbe78ddb6  ./target/release/WhiteBeam_0.2.6_aarch64.tar.gz

Expected output:

$ cat WhiteBeam_0.2.6_aarch64.SHA256
e192e16265df05403a7aaa544234f74bf7f1957ada5ac7042b06ff1bbe78ddb6  WhiteBeam_0.2.6_aarch64.tar.gz

Needed for reproducible builds.

noproto avatar Oct 13 '21 22:10 noproto

Relevant lines: https://github.com/WhiteBeamSec/WhiteBeam/blob/93d956c68fdc711c7813e58a28d68171d45bcfcf/src/installer/platforms/linux/mod.rs#L171-L172

noproto avatar Oct 14 '21 01:10 noproto