software-opal / dl-verify Goto Github PK

The program should be able to have one or more checksums specified on the command line.

The program should support MD5, SHA1, SHA224, SHA256, SHA384, SHA512, and where supported SHA3.

The downloaded file should only be output iff one of the given sums match. Otherwise an error should be printed to stderr.

Provide a gz, zip, xz and similar compression schemes; also decompress to have it detect the compression type

When #5 is complete, also support extracting tar files

This must happen after verification and only when the file is valid. A failure to decompress or detect the compression type is a command failure

With a number of issues like #6, #7, and #8, the options are simply inlining extra functionality that is usually provided by external programs. We should consider if these are worthwhile to implement, and if they are decide if we will use existing external binaries (and thus they're not available on FROM scratch images) or if we bundle the functionality into this application.

Requires #5.
A user should be able to specify one or more permissions options, each one is combined with the previous one and is parsed according to the schematics of chmod

When an additional signature url and one or more gpg keys are given there application should download the signature and verify that it was created by one of the given keys and that it is valid.

Each key should be downloaded from a configured key server. Optionally the user can indicate that the local gpg key store is acceptable.

Iff the signature is downloaded successfully, is by one of the listed keys, and the signature is valid then the download file should be output

Otherwise an error should be printed and the command should fall

If one or more of the keys is missing or revoked then print a warning but don't necessarily exit. This warning should be elevated to an episode when a fail on warnings opt is given. And the warning should not be printed off quiet is given.

Short keys must not be accepted.

Requires #5

Support a owner, user and group option. Each one should apply over previous. The owner option should support user:group and other similar mechanisms to chown