Add repo-validate.sh script to scan for mismatched metadata

- Flattens package sections into one-liners for grepping - Compares file-size and SHA256 checksums - RPM only: scans through repodata history to pin-point when mismatch occurred (issue #2) Signed-off-by: Kevin Mittman <[email protected]>
NVIDIA · Nov 19, 2021 · 6dfe3cc · 6dfe3cc
1 parent f33390e
commit 6dfe3cc
Show file tree

Hide file tree

Showing 2 changed files with 434 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -18,7 +18,8 @@ See [concept](#concept), [metadata](#metadata), and [presentations](#presentatio
   * [repo-overlay](#repo-overlay)
   * [repo-debian](#repo-debian)
   * [repo-rpm](#repo-rpm)
-  * [repo-mirror](#repo-rpm)
+  * [repo-mirror](#repo-mirror)
+  * [repo-validate](#repo-validate)
 - [Prerequisites](#prerequisites)
   * [Clone this git repository](#clone-this-git-repository)
   * [(Optional) fetch genmodules](#optional-fetch-genmodules)
@@ -158,6 +159,14 @@ Download Debian or RPM packages from an existing repository
 > ex: ./repo-mirror.sh --output=/data/snapshot --distro=sles15 --arch=x86_64
 ```
 
+### repo-validate
+Verify that metadata matches RPM and Debian packages (filesize and SHA256 checksum)
+
+```shell
+./repo-validate.sh --mirror=path/to/snapshot (--distro=$distro) (--arch=$arch) (--dryrun)
+> ex: ./repo-validate.sh --mirror=/data/snapshot --distro=rhel8 --arch=x86_64
+```
+
 
 ## Concept