Signed Checksums for release archives

[Mark Felder]

On Sun, Jan 10, 2016, at 15:07, Clint Armstrong wrote:
> My use case is for creating Jails. I'm trying to script downloading and
> extracting an archive for a jail and would like to be able to verify the
> download.
>

After you have the txz extracted to the jail, use freebsd-update to
update it and then IDS to verify it.

If you have a 10.2-RELEASE host and a 9.3-RELEASE jail you would do
this:

$ UNAME_r=9.3-RELEASE freebsd-update -d /path/to/jail fetch install
$ UNAME_r=9.3-RELEASE freebsd-update -d /path/to/jail IDS


-- 
  Mark Felder
  ports-secteam member
  feld at FreeBSD.org