diff options
| author | superherointj <5861043+superherointj@users.noreply.github.com> | 2024-04-15 13:21:38 -0300 |
|---|---|---|
| committer | superherointj <5861043+superherointj@users.noreply.github.com> | 2024-04-15 13:21:38 -0300 |
| commit | e1728ff7f53cc75f4ae228faae9088452d7063b3 (patch) | |
| tree | 0ca8e183aa1d3ca9599df405a83f51c0afcc586b /pkgs/applications/networking/cluster/fluxcd | |
| parent | 7e358fc824230a4649981c94ab86e07abd2a32b9 (diff) | |
fluxcd: use SRI hash in update script
Diffstat (limited to 'pkgs/applications/networking/cluster/fluxcd')
| -rwxr-xr-x | pkgs/applications/networking/cluster/fluxcd/update.sh | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/applications/networking/cluster/fluxcd/update.sh b/pkgs/applications/networking/cluster/fluxcd/update.sh index f252d587daaf3..1763b37d33285 100755 --- a/pkgs/applications/networking/cluster/fluxcd/update.sh +++ b/pkgs/applications/networking/cluster/fluxcd/update.sh @@ -12,7 +12,9 @@ LATEST_VERSION=$(echo ${LATEST_TAG} | sed 's/^v//') if [ ! "$OLD_VERSION" = "$LATEST_VERSION" ]; then SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/archive/refs/tags/${LATEST_TAG}.tar.gz) + SHA256=$(nix hash to-sri --type sha256 $SHA256) SPEC_SHA256=$(nix-prefetch-url --quiet --unpack https://github.com/fluxcd/flux2/releases/download/${LATEST_TAG}/manifests.tar.gz) + SPEC_SHA256=$(nix hash to-sri --type sha256 $SPEC_SHA256) setKV () { sed -i "s|$1 = \".*\"|$1 = \"${2:-}\"|" "${FLUXCD_PATH}/default.nix" |