Open noproto opened 2 years ago
The resulting .SHA256 file produced by cargo run package contains a relative path to the WhiteBeam package, which will produce an error when run through sha256sum -c (or equivalent command).
cargo run package
sha256sum -c
Erroneous output:
$ cat WhiteBeam_0.2.6_aarch64.SHA256 e192e16265df05403a7aaa544234f74bf7f1957ada5ac7042b06ff1bbe78ddb6 ./target/release/WhiteBeam_0.2.6_aarch64.tar.gz
Expected output:
$ cat WhiteBeam_0.2.6_aarch64.SHA256 e192e16265df05403a7aaa544234f74bf7f1957ada5ac7042b06ff1bbe78ddb6 WhiteBeam_0.2.6_aarch64.tar.gz
Needed for reproducible builds.
Relevant lines: https://github.com/WhiteBeamSec/WhiteBeam/blob/93d956c68fdc711c7813e58a28d68171d45bcfcf/src/installer/platforms/linux/mod.rs#L171-L172
noproto
commented
2 years ago
The resulting .SHA256 file produced by
cargo run packagecontains a relative path to the WhiteBeam package, which will produce an error when run throughsha256sum -c(or equivalent command).Erroneous output:
Expected output:
Needed for reproducible builds.