| #!/usr/bin/env bash |
| # Copyright 2024 The Bazel Authors. All rights reserved. |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| echo "Checking hashes for $# configs" |
| |
| function download_and_check_hash() { |
| name=$1 |
| url=$2 |
| hash=$3 |
| TMP_FILE=$(mktemp -q /tmp/remotejavatools.XXXXXX) |
| echo "fetching $name from $url to ${TMP_FILE}" |
| curl --silent -o ${TMP_FILE} -L "$url" |
| actual_hash=`sha256sum ${TMP_FILE} | cut -d' ' -f1` |
| if [ "${hash}" != "${actual_hash}" ]; then |
| echo "ERROR: wrong hash for ${name}! wanted: ${hash}, got: ${actual_hash}" |
| exit 1 |
| fi |
| } |
| |
| for config in "$@"; do |
| IFS=, read -r name mirror_url gh_url hash <<< "${config}" |
| download_and_check_hash ${name} ${mirror_url} ${hash} |
| download_and_check_hash ${name} ${gh_url} ${hash} |
| done |