From 16163081ce36f9cf89bae3804f6164e68a5da7a6 Mon Sep 17 00:00:00 2001
From: Rowan Powell <rp17@it-innovation.soton.ac.uk>
Date: Thu, 22 Feb 2018 16:50:35 +0000
Subject: [PATCH] Added defensive programming for clmc agent and service
 installs

---
 scripts/clmc-agent/install.sh   |  5 +++++
 scripts/clmc-service/install.sh | 15 +++++++++++++++
 2 files changed, 20 insertions(+)

diff --git a/scripts/clmc-agent/install.sh b/scripts/clmc-agent/install.sh
index e9fd73a..55d1b77 100755
--- a/scripts/clmc-agent/install.sh
+++ b/scripts/clmc-agent/install.sh
@@ -52,6 +52,11 @@ if [ ! -f $TELEGRAF_SERVICE_CONF_FILE ]; then
 fi
 
 wget https://dl.influxdata.com/telegraf/releases/telegraf_1.3.2-1_amd64.deb
+sha1sum telegraf_1.3.2-1_amd64.deb | grep '73794cc2986fef7c81cfff8bc638cd84d6629da8' &> /dev/null
+if [ $? == 1 ]; then
+	echo "telegraf download failed sha1sum check"
+	exit
+fi
 dpkg -i telegraf_1.3.2-1_amd64.deb
 
 # Copy configuration
diff --git a/scripts/clmc-service/install.sh b/scripts/clmc-service/install.sh
index 7850c75..f96d123 100755
--- a/scripts/clmc-service/install.sh
+++ b/scripts/clmc-service/install.sh
@@ -30,14 +30,29 @@ apt-get -y install python
 
 # install influx
 wget https://dl.influxdata.com/influxdb/releases/influxdb_1.2.4_amd64.deb
+sha1sum influxdb_1.2.4_amd64.deb | grep 'e77522b65a582787b0d61b90d355284bb2683258' &> /dev/null
+if [ $? == 1 ]; then
+	echo "influx download failed sha1sum check"
+	exit
+fi
 dpkg -i influxdb_1.2.4_amd64.deb
 
 # install kapacitor
 wget https://dl.influxdata.com/kapacitor/releases/kapacitor_1.3.1_amd64.deb
+sha1sum kapacitor_1.3.1_amd64.deb | grep '5ae1ead9904ea651e72b181848c2e84338eb88b4' &> /dev/null
+if [ $? == 1 ]; then
+	echo "Kapacitor download failed sha1sum check"
+	exit
+fi
 dpkg -i kapacitor_1.3.1_amd64.deb
 
 # install Chronograf
 wget https://dl.influxdata.com/chronograf/releases/chronograf_1.3.3.0_amd64.deb
+sha1sum chronograf_1.3.3.0_amd64.deb | grep '9b567598c078ba1ad73dd587d7f32163e0886471' &> /dev/null
+if [ $? == 1 ]; then
+	echo "Chronograf download failed sha1sum check"
+	exit
+fi
 dpkg -i chronograf_1.3.3.0_amd64.deb
 
 systemctl start influxdb
-- 
GitLab