Merge pull request #52 from theohbrothers/enhancement/add-validation-…

…for-sops Enhancement: Add validation for `sops`
theohbrothers · Mar 11, 2023 · 82b8706 · 82b8706
2 parents 4bf8c45 + ccb07b4
commit 82b8706
Show file tree

Hide file tree

Showing 14 changed files with 70 additions and 28 deletions.
diff --git a/generate/templates/Dockerfile.ps1 b/generate/templates/Dockerfile.ps1
@@ -80,8 +80,11 @@ RUN apk add --no-cache curl \
         'sops' {
 
             @"
-# Note: `sops` does not provide binaries for other arch other than `linux/i386` and `linux/amd64`. So `sops` might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.14.10-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.14.10-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.15.12-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.15.12-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.16.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.16.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.17.17-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.17.17-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.18.20-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.18.20-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.19.16-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.19.16-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.20.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.20.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.21.14-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.21.14-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.22.17-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.22.17-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.23.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.23.15-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.24.9-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.24.9-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.25.5-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.25.5-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg
 

diff --git a/variants/v1.26.0-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile b/variants/v1.26.0-envsubst-git-jq-kustomize-sops-ssh-alpine-3.8/Dockerfile
@@ -44,8 +44,11 @@ RUN apk add --no-cache curl \
     && chmod +x /usr/local/bin/kustomize \
     && apk del curl
 
-# Note: sops does not provide binaries for other arch other than linux/i386 and linux/amd64. So sops might not work on other architectures.
-RUN wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops && chmod +x /usr/local/bin/sops
+RUN set -eux; \
+    wget -qO- https://github.com/mozilla/sops/releases/download/v3.7.1/sops-v3.7.1.linux > /usr/local/bin/sops; \
+    chmod +x /usr/local/bin/sops; \
+    sha256sum /usr/local/bin/sops | grep '^185348fd77fc160d5bdf3cd20ecbc796163504fd3df196d7cb29000773657b74 '; \
+    sops --version
 
 RUN apk add --no-cache gnupg