Currently, a downloaded text response or other invalid file will be treated as valid so long as there isn't an HTTP error response. This can lead to a broken installation when the invalid update replaces the current squashfs image.
Steps to Reproduce
Place an arbitrary file at /opt/neon/update.squashfs
NeonDaniel
commented
8 months ago
Description
Currently, a downloaded text response or other invalid file will be treated as valid so long as there isn't an HTTP error response. This can lead to a broken installation when the invalid update replaces the current
squashfsimage.Steps to Reproduce
/opt/neon/update.squashfsRelevant Code
https://github.com/NeonGeckoCom/neon_debos/blob/dev/initramfs_build/overlay/scripts/check_update.sh
Other Notes
Consider some method to check file size or contents to validate it is probably squashFS