From 2d6bfe2af7dc0ff91f602b65e28d7aa2a51b8d66 Mon Sep 17 00:00:00 2001
From: Lionel Coupouchetty-Ramouchetty <lionel@coupou.fr>
Date: Sun, 23 Feb 2020 17:16:39 +0100
Subject: [PATCH] feature: control sum check restic binary

---
 scripts/_common.sh | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/scripts/_common.sh b/scripts/_common.sh
index 4a902e2..cc3724c 100644
--- a/scripts/_common.sh
+++ b/scripts/_common.sh
@@ -14,8 +14,18 @@ install_restic () {
   if [ ! -f /usr/local/bin/restic ];then
     pushd /tmp
     wget https://github.com/restic/restic/releases/download/v${RESTIC_VERSION}/restic_${RESTIC_VERSION}_linux_amd64.bz2 -O /tmp/restic.bz2
-    bunzip2 restic.bz2 -c > /usr/local/bin/restic
-    chmod +x /usr/local/bin/restic
+    wget https://github.com/restic/restic/releases/download/v${RESTIC_VERSION}/SHA256SUMS -O /tmp/restic-sha256sums
+    expected_sum=$(grep restic_${RESTIC_VERSION}_linux_amd64.bz2 /tmp/restic-sha256sums | awk '{print $1}')
+    sum=$(sha256sum /tmp/restic.bz2 | awk '{print $1}')
+    if [ "$sum" == "$expected_sum" ];then
+      bunzip2 restic.bz2 -c > /usr/local/bin/restic
+      chmod +x /usr/local/bin/restic
+    else
+      echo -e "\e[91m \e[1m"
+      echo -e "\nDownloaded file does not match expected sha256 sum, aborting"
+      echo -e "\e[22m"
+      exit 1
+    fi
   fi
 }