Skip to content

v0.3.25 — verify LabVIEW installer ISO SHA-256 before attaching

Choose a tag to compare

View all tags
@svelderrainruiz svelderrainruiz released this 06 Nov 19:30
· 185 commits to develop since this release
Immutable release. Only release title and notes can be modified.
v0.3.25
7b527f7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.3.25

  • fix install-labview: verify the supplied LabVIEW installer ISO's SHA-256 against provisioning-manifest.json's pinned labview.installer.sha256 before attaching it, fail-closed on mismatch -- previously this phase attached the operator-supplied ISO with no verification at all, unlike install-vipm's existing fail-closed check, even though the manifest already pinned the exact expected hash (#38). Real-dispatch validated against an actual VM: confirmed the valid-hash path installs LabVIEW successfully end to end, and the mismatched-hash path fails closed before any VM is touched
Assets 3
Loading