Signed Checksums for release archives

Mark Felder feld at FreeBSD.org
Mon Jan 11 16:53:29 UTC 2016



On Sun, Jan 10, 2016, at 15:07, Clint Armstrong wrote:
> My use case is for creating Jails. I'm trying to script downloading and
> extracting an archive for a jail and would like to be able to verify the
> download.
>

After you have the txz extracted to the jail, use freebsd-update to
update it and then IDS to verify it.

If you have a 10.2-RELEASE host and a 9.3-RELEASE jail you would do
this:

$ UNAME_r=9.3-RELEASE freebsd-update -d /path/to/jail fetch install
$ UNAME_r=9.3-RELEASE freebsd-update -d /path/to/jail IDS


-- 
  Mark Felder
  ports-secteam member
  feld at FreeBSD.org


More information about the freebsd-security mailing list