psi-jack
/
yadm
mirror of
1
0
Fork 0
Code Issues Releases Wiki Activity

Check encrypted files with SHA-512/256 checksums

This commit is contained in:
Martin Zuther 2019-12-27 17:13:25 +01:00
parent b4fd9e19c2
commit 91266ca8eb
No known key found for this signature in database
GPG Key ID: 47D3346D758A37D8
3 changed files with 128 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
contrib/hooks/post_encrypt Executable file
View File

@ -0,0 +1,57 @@
#!/usr/bin/env bash
# yadm - Yet Another Dotfiles Manager
# Copyright (C) 2015-2019 Tim Byrne and Martin Zuther
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <https://www.gnu.org/licenses/>.
YADM_DIRECTORY=$(dirname $YADM_HOOK_REPO)
YADM_CHECKSUMS=$YADM_DIRECTORY/files.checksums
# check if "shasum" exists
if command -v shasum > /dev/null; then
# check if "shasum" supports SHA-512/256 algorithm
echo -n | shasum --algorithm 512256 2>&1 1> /dev/null
if [ $? -ne 0 ]; then
echo
echo "WARNING: \"shasum\" does not support SHA-512/256. No checksums were created."
exit $YADM_HOOK_EXIT
fi
# empty checksum file
echo -n > $YADM_CHECKSUMS
# calculate checksums for encrypted files
for included in ${YADM_ENCRYPT_INCLUDE_FILES[@]}; do
shasum --algorithm 512256 $included >> $YADM_CHECKSUMS
ERROR_CODE=$?
# signal errors
if [ $ERROR_CODE -ne 0 ]; then
exit $ERROR_CODE
fi
done
echo "Wrote checksums: $YADM_CHECKSUMS (SHA-512/256)"
else
echo
echo "WARNING: command \"shasum\" not found. No checksums were created."
exit $YADM_HOOK_EXIT
fi
# return exit status of the yadm command
exit $YADM_HOOK_EXIT

69
contrib/hooks/post_status Executable file
View File

@ -0,0 +1,69 @@
#!/usr/bin/env bash
# yadm - Yet Another Dotfiles Manager
# Copyright (C) 2015-2019 Tim Byrne and Martin Zuther
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <https://www.gnu.org/licenses/>.
YADM_DIRECTORY=$(dirname $YADM_HOOK_REPO)
YADM_CHECKSUMS=$YADM_DIRECTORY/files.checksums
# check whether file with checksums exists
if [ -f $YADM_CHECKSUMS ]; then
# check if "shasum" exists
if command -v shasum > /dev/null; then
# check if "shasum" supports SHA-512/256 algorithm
echo -n | shasum --algorithm 512256 2>&1 1> /dev/null
if [ $? -ne 0 ]; then
echo
echo "WARNING: \"shasum\" does not support SHA-512/256. Checksums were not verified."
exit $YADM_HOOK_EXIT
fi
# check encrypted files for differences and capture output
YADM_CHECKSUM_OUTPUT=$(shasum --algorithm 512256 --check $YADM_CHECKSUMS 2> /dev/null)
ERROR_CODE=$?
# some checksums do not match
if [ $ERROR_CODE -ne 0 ]; then
echo
echo "Some SHA-512/256 sums do not match:"
# set output color to red
echo -e "\033[0;31m"
# display mismatching files
while IFS= read -r line; do
echo $line | grep -iv "\sok$" | sed 's/^/ / ; s/: FAILED$//'
done <<< "$YADM_CHECKSUM_OUTPUT"
# reset output color
echo -e "\033[0m"
echo "Consider running either \"yadm encrypt\" or \"yadm decrypt\"."
# signal error
exit $ERROR_CODE
fi
else
echo
echo "WARNING: command \"shasum\" not found. Checksums were not verified."
exit $YADM_HOOK_EXIT
fi
fi
# return exit status of the yadm command
exit $YADM_HOOK_EXIT

2
yadm
View File

@ -1577,11 +1577,13 @@ function invoke_hook() {
YADM_HOOK_FULL_COMMAND=$FULL_COMMAND
YADM_HOOK_REPO=$YADM_REPO
YADM_HOOK_WORK=$YADM_WORK
YADM_ENCRYPT_INCLUDE_FILES=${ENCRYPT_INCLUDE_FILES[@]}
export YADM_HOOK_COMMAND
export YADM_HOOK_EXIT
export YADM_HOOK_FULL_COMMAND
export YADM_HOOK_REPO
export YADM_HOOK_WORK
export YADM_ENCRYPT_INCLUDE_FILES
"$hook_command"
hook_status=$?