diff options
| author | Luke Hoersten <[email protected]> | 2026-07-31 14:30:29 -0500 |
|---|---|---|
| committer | Luke Hoersten <[email protected]> | 2026-07-31 14:30:29 -0500 |
| commit | 960d14f9f2af1990dac0ae887c150d8a9ea00dce (patch) | |
| tree | 28bc96d0adc86f457d0009ae9b4562246b391e9b /bitcoind/defaults/main.yaml | |
| parent | 81809160f41aed1161070148d8cf60a1ed24a6f3 (diff) | |
bitcoind: verify the release tarball against a pinned sha256
Pinned per arch from the official SHA256SUMS; download and unarchive
are split so nothing extracts unless the tarball matches. Update the
pins when bumping bitcoind_version.
Diffstat (limited to 'bitcoind/defaults/main.yaml')
| -rw-r--r-- | bitcoind/defaults/main.yaml | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/bitcoind/defaults/main.yaml b/bitcoind/defaults/main.yaml index 472a230..779c5d0 100644 --- a/bitcoind/defaults/main.yaml +++ b/bitcoind/defaults/main.yaml @@ -5,6 +5,13 @@ bitcoind_user: "bitcoin" bitcoind_version: "31.0" bitcoind_arch: "{{ansible_facts['architecture']}}" bitcoind_url: "https://bitcoincore.org/bin/bitcoin-core-{{bitcoind_version}}/bitcoin-{{bitcoind_version}}-{{bitcoind_arch}}-linux-gnu.tar.gz" +# Release tarball sha256 per arch, pinned from +# https://bitcoincore.org/bin/bitcoin-core-<version>/SHA256SUMS. Update when +# bumping bitcoind_version, and verify the SHA256SUMS gpg signature per +# https://bitcoincore.org/en/download/ while at it. +bitcoind_sha256: + aarch64: "4de1d568dedd48604f75132421bc0abeca432639589b49a3909c81db3a813112" + x86_64: "d3e4c58a35b1d0a97a457462c94f55501ad167c660c245cb1ffa565641c65074" bitcoind_conf_dir: "/home/{{bitcoind_user}}/.bitcoin" bitcoind_enable_txindex: "0" bitcoind_enable_filterindex: "1" |