From 7725a73cf59094bfca6ca8715e168cb7de4493b8 Mon Sep 17 00:00:00 2001 From: link2xt Date: Fri, 3 Oct 2025 19:11:34 +0000 Subject: [PATCH] Ensure that downloaded iroh-relay matches expected SHA-256 sum Previously we only used SHA-256 sum to check if we need to update the binary. --- cmdeploy/src/cmdeploy/__init__.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cmdeploy/src/cmdeploy/__init__.py b/cmdeploy/src/cmdeploy/__init__.py index 5f6efaf3..22a0c46e 100644 --- a/cmdeploy/src/cmdeploy/__init__.py +++ b/cmdeploy/src/cmdeploy/__init__.py @@ -572,7 +572,7 @@ def deploy_iroh_relay(config) -> None: server.shell( name="Download iroh-relay", commands=[ - f"(echo '{sha256sum} /usr/local/bin/iroh-relay' | sha256sum -c) || (curl -L {url} | gunzip | tar -x -f - ./iroh-relay -O >/usr/local/bin/iroh-relay.new && mv /usr/local/bin/iroh-relay.new /usr/local/bin/iroh-relay)", + f"(echo '{sha256sum} /usr/local/bin/iroh-relay' | sha256sum -c) || (curl -L {url} | gunzip | tar -x -f - ./iroh-relay -O >/usr/local/bin/iroh-relay.new && (echo '{sha256sum} /usr/local/bin/iroh-relay.new' | sha256sum -c) && mv /usr/local/bin/iroh-relay.new /usr/local/bin/iroh-relay)", "chmod 755 /usr/local/bin/iroh-relay", ], )