Single instance DB projects - verify DB installers (#522)

PaulNeumann · web-flow · commit 3a72fc63ee41 · 2024-08-26T12:21:20.000-07:00
For the single instance database projects, verify the SHA-256 digest of the database installer file at the beginning of the install.sh script, before installing OS updates. For all single instance database projects: - Add a db_installer.sha256 file containing the SHA-256 digest value for the database installer. (2 digest files for the 12.1.0.2 project, since it uses separate sets of installer files depending on the Oracle edition.) - Add *.sha256 to .gitattributes, to preserve LF line endings on Windows hosts. Otherwise, sha256sum doesn't read the file correctly. - Verify the SHA-256 digest at the start of the install.sh script. If verification fails, exit with an error message explaining what to do. For the XE/Free database projects: - Move the download of the installer rpm to the beginning of the install.sh script. - Modify the install.sh script so it never deletes an installer rpm that the user has previously downloaded. For the 23.3.0-Free project (unrelated, but necessary): - Modify the install.sh script to use oracle-database-preinstall-23ai instead of oracle-database-preinstall-23c, which has been obsoleted in the yum repository. Tested with both VirtualBox and libvirt providers. Fixes #512 Signed-off-by: Paul Neumann <38871902+PaulNeumann@users.noreply.github.com>
diff --git a/OracleDatabase/11.2.0.2/.gitattributes b/OracleDatabase/11.2.0.2/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/11.2.0.2/db_installer.sha256 b/OracleDatabase/11.2.0.2/db_installer.sha256
@@ -0,0 +1 @@
+b5039fad2e4f92c68778dcabbd0b4622a6cb025f25f7d6222f9e9de53ebab531 */vagrant/oracle-xe-11.2.0-1.0.x86_64.rpm.zip
diff --git a/OracleDatabase/11.2.0.2/scripts/install.sh b/OracleDatabase/11.2.0.2/scripts/install.sh
@@ -16,6 +16,24 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# verify that database installer is present and valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: Database installer file missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer file
+           is in the same directory as the Vagrantfile,
+           and that its SHA-256 digest matches the
+           value in the db_installer.sha256 file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
diff --git a/OracleDatabase/12.1.0.2/.gitattributes b/OracleDatabase/12.1.0.2/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/12.1.0.2/db_installer-EE.sha256 b/OracleDatabase/12.1.0.2/db_installer-EE.sha256
@@ -0,0 +1,2 @@
+31fdc2af41687b4e547a3a18f796424d8c1af36406d2160f65b0af6a9cd47355 */vagrant/linuxamd64_12102_database_1of2.zip
+03da14f5e875304b28f0f3bb02af0ec33227885b99c9865df70749d1e220accd */vagrant/linuxamd64_12102_database_2of2.zip
diff --git a/OracleDatabase/12.1.0.2/db_installer-SE2.sha256 b/OracleDatabase/12.1.0.2/db_installer-SE2.sha256
@@ -0,0 +1,2 @@
+73873369753230f5a0921f95aceadb591388cb06ed72a7f3aea7bcbcea2403bc */vagrant/linuxamd64_12102_database_se2_1of2.zip
+2492e1be1e3e3531da83d0843c09c08e435ac8cefd9a00c0df56be4f15ceebf3 */vagrant/linuxamd64_12102_database_se2_2of2.zip
diff --git a/OracleDatabase/12.1.0.2/scripts/install.sh b/OracleDatabase/12.1.0.2/scripts/install.sh
@@ -16,6 +16,39 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# verify that database installers are present and valid
+echo 'INSTALLER: Verifying database installer files'
+
+case "$ORACLE_EDITION" in
+  'EE')
+    digest_file='db_installer-EE.sha256'
+    installer_zips='linuxamd64_12102_database_?of2.zip'
+    ;;
+  'SE2')
+    digest_file='db_installer-SE2.sha256'
+    installer_zips='linuxamd64_12102_database_se2_?of2.zip'
+    ;;
+  *)
+    echo "INSTALLER: Invalid ORACLE_EDITION ${ORACLE_EDITION}. Must be EE or SE2. Exiting."
+    exit 1
+    ;;
+esac
+
+sha256sum --check /vagrant/"${digest_file}" || {
+  cat << EOF
+
+INSTALLER: Database installer files missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer files
+           are in the same directory as the Vagrantfile,
+           and that their SHA-256 digests match the
+           values in the ${digest_file} file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
@@ -55,18 +88,7 @@ echo 'INSTALLER: Environment variables set'
 
 # Install Oracle
 
-case "$ORACLE_EDITION" in
-  "EE")
-    unzip '/vagrant/linuxamd64_12102_database_?of2.zip' -d /tmp
-    ;;
-  "SE2")
-    unzip '/vagrant/linuxamd64_12102_database_se2_?of2.zip' -d /tmp
-    ;;
-  *)
-    echo "INSTALLER: Invalid ORACLE_EDITION $ORACLE_EDITION. Must be EE or SE2. Exiting."
-    exit 1
-    ;;
-esac
+unzip /vagrant/"${installer_zips}" -d /tmp
 
 cp /vagrant/ora-response/db_install.rsp.tmpl /tmp/db_install.rsp
 sed -i -e "s|###ORACLE_BASE###|$ORACLE_BASE|g" /tmp/db_install.rsp
diff --git a/OracleDatabase/12.2.0.1/.gitattributes b/OracleDatabase/12.2.0.1/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/12.2.0.1/db_installer.sha256 b/OracleDatabase/12.2.0.1/db_installer.sha256
@@ -0,0 +1 @@
+96ed97d21f15c1ac0cce3749da6c3dac7059bb60672d76b008103fc754d22dde */vagrant/linuxx64_12201_database.zip
diff --git a/OracleDatabase/12.2.0.1/scripts/install.sh b/OracleDatabase/12.2.0.1/scripts/install.sh
@@ -16,6 +16,24 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# verify that database installer is present and valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: Database installer file missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer file
+           is in the same directory as the Vagrantfile,
+           and that its SHA-256 digest matches the
+           value in the db_installer.sha256 file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
diff --git a/OracleDatabase/18.3.0/.gitattributes b/OracleDatabase/18.3.0/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/18.3.0/db_installer.sha256 b/OracleDatabase/18.3.0/db_installer.sha256
@@ -0,0 +1 @@
+c96a4fd768787af98272008833fe10b172691cf84e42816b138c12d4de63ab96 */vagrant/LINUX.X64_180000_db_home.zip
diff --git a/OracleDatabase/18.3.0/scripts/install.sh b/OracleDatabase/18.3.0/scripts/install.sh
@@ -16,6 +16,24 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# verify that database installer is present and valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: Database installer file missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer file
+           is in the same directory as the Vagrantfile,
+           and that its SHA-256 digest matches the
+           value in the db_installer.sha256 file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
diff --git a/OracleDatabase/18.4.0-XE/.gitattributes b/OracleDatabase/18.4.0-XE/.gitattributes
@@ -1,2 +1,3 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
 *.tmpl	text eol=lf
diff --git a/OracleDatabase/18.4.0-XE/db_installer.sha256 b/OracleDatabase/18.4.0-XE/db_installer.sha256
@@ -0,0 +1 @@
+4df0318d72a0b97f5468b36919a23ec07533f5897b324843108e0376566d50c8 */vagrant/oracle-database-xe-18c-1.0-1.x86_64.rpm
diff --git a/OracleDatabase/18.4.0-XE/scripts/install.sh b/OracleDatabase/18.4.0-XE/scripts/install.sh
@@ -16,6 +16,33 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# if the database installer exists, set parameter to keep it
+# otherwise, download it
+db_installer='oracle-database-xe-18c-1.0-1.x86_64.rpm'
+
+if [[ -f /vagrant/"${db_installer}" ]]; then
+  KEEP_DB_INSTALLER='true'
+else
+  echo 'INSTALLER: Downloading Oracle Database software'
+  curl -Ls -o /vagrant/"${db_installer}" \
+       https://download.oracle.com/otn-pub/otn_software/db-express/"${db_installer}"
+fi
+
+# verify that database installer is valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: The database installer file is invalid.
+           Destroy this VM (vagrant destroy) and delete the
+           ${db_installer}
+           file before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
@@ -48,16 +75,6 @@ echo "export PATH=\$PATH:\$ORACLE_HOME/bin" >> /home/oracle/.bashrc
 echo 'INSTALLER: Environment variables set'
 
 # Install Oracle
-# if installer doesn't exist, download it
-db_installer='oracle-database-xe-18c-1.0-1.x86_64.rpm'
-if [[ ! -f /vagrant/"${db_installer}" ]]; then
-  echo 'INSTALLER: Downloading Oracle Database software'
-  (
-    cd /vagrant || exit 1
-    curl -L -O -s https://download.oracle.com/otn-pub/otn_software/db-express/"${db_installer}"
-  )
-fi
-
 yum -y localinstall /vagrant/"${db_installer}"
 
 if [[ "${KEEP_DB_INSTALLER,,}" == 'false' ]]; then
diff --git a/OracleDatabase/19.3.0/.gitattributes b/OracleDatabase/19.3.0/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/19.3.0/db_installer.sha256 b/OracleDatabase/19.3.0/db_installer.sha256
@@ -0,0 +1 @@
+ba8329c757133da313ed3b6d7f86c5ac42cd9970a28bf2e6233f3235233aa8d8 */vagrant/LINUX.X64_193000_db_home.zip
diff --git a/OracleDatabase/19.3.0/scripts/install.sh b/OracleDatabase/19.3.0/scripts/install.sh
@@ -16,6 +16,24 @@ set -e
 
 echo 'INSTALLER: Started up'
 
+# verify that database installer is present and valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: Database installer file missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer file
+           is in the same directory as the Vagrantfile,
+           and that its SHA-256 digest matches the
+           value in the db_installer.sha256 file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 yum upgrade -y
 
diff --git a/OracleDatabase/21.3.0-XE/.gitattributes b/OracleDatabase/21.3.0-XE/.gitattributes
@@ -1,2 +1,3 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
 *.tmpl	text eol=lf
diff --git a/OracleDatabase/21.3.0-XE/db_installer.sha256 b/OracleDatabase/21.3.0-XE/db_installer.sha256
@@ -0,0 +1 @@
+f8357b432de33478549a76557e8c5220ec243710ed86115c65b0c2bc00a848db */vagrant/oracle-database-xe-21c-1.0-1.ol8.x86_64.rpm
diff --git a/OracleDatabase/21.3.0-XE/scripts/install.sh b/OracleDatabase/21.3.0-XE/scripts/install.sh
@@ -16,6 +16,33 @@ set -Eeuo pipefail
 
 echo 'INSTALLER: Started up'
 
+# if the database installer exists, set parameter to keep it
+# otherwise, download it
+db_installer='oracle-database-xe-21c-1.0-1.ol8.x86_64.rpm'
+
+if [[ -f /vagrant/"${db_installer}" ]]; then
+  KEEP_DB_INSTALLER='true'
+else
+  echo 'INSTALLER: Downloading Oracle Database software'
+  curl -Ls -o /vagrant/"${db_installer}" \
+       https://download.oracle.com/otn-pub/otn_software/db-express/"${db_installer}"
+fi
+
+# verify that database installer is valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: The database installer file is invalid.
+           Destroy this VM (vagrant destroy) and delete the
+           ${db_installer}
+           file before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 dnf upgrade -y
 
@@ -50,16 +77,6 @@ EOF
 echo 'INSTALLER: Environment variables set'
 
 # Install Oracle
-# if installer doesn't exist, download it
-db_installer='oracle-database-xe-21c-1.0-1.ol8.x86_64.rpm'
-if [[ ! -f /vagrant/"${db_installer}" ]]; then
-  echo 'INSTALLER: Downloading Oracle Database software'
-  (
-    cd /vagrant || exit 1
-    curl -LOs https://download.oracle.com/otn-pub/otn_software/db-express/"${db_installer}"
-  )
-fi
-
 dnf -y localinstall /vagrant/"${db_installer}"
 
 if [[ "${KEEP_DB_INSTALLER,,}" == 'false' ]]; then
diff --git a/OracleDatabase/21.3.0/.gitattributes b/OracleDatabase/21.3.0/.gitattributes
@@ -1 +1,2 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
diff --git a/OracleDatabase/21.3.0/db_installer.sha256 b/OracleDatabase/21.3.0/db_installer.sha256
@@ -0,0 +1 @@
+c05d5c32a72b9bf84ab6babb49aee99cbb403930406aabe3cf2f94f1d35e0916 */vagrant/LINUX.X64_213000_db_home.zip
diff --git a/OracleDatabase/21.3.0/scripts/install.sh b/OracleDatabase/21.3.0/scripts/install.sh
@@ -16,6 +16,24 @@ set -Eeuo pipefail
 
 echo 'INSTALLER: Started up'
 
+# verify that database installer is present and valid
+echo 'INSTALLER: Verifying database installer file'
+
+sha256sum --check /vagrant/db_installer.sha256 || {
+  cat << EOF
+
+INSTALLER: Database installer file missing or invalid.
+           Destroy this VM (vagrant destroy), then
+           make sure that the database installer file
+           is in the same directory as the Vagrantfile,
+           and that its SHA-256 digest matches the
+           value in the db_installer.sha256 file,
+           before running vagrant up again.
+
+EOF
+  exit 1
+}
+
 # get up to date
 dnf upgrade -y
 
diff --git a/OracleDatabase/23.3.0-Free/.gitattributes b/OracleDatabase/23.3.0-Free/.gitattributes
@@ -1,2 +1,3 @@
 *.sh	text eol=lf
+*.sha256	text eol=lf
 *.tmpl	text eol=lf
diff --git a/OracleDatabase/23.3.0-Free/db_installer.sha256 b/OracleDatabase/23.3.0-Free/db_installer.sha256
@@ -0,0 +1 @@
+1319bcd7cb706cb727501cbd98abf3f3980a4fdabeb613a1abffc756925c7374 */vagrant/oracle-database-free-23c-1.0-1.el8.x86_64.rpm
diff --git a/OracleDatabase/23.3.0-Free/scripts/install.sh b/OracleDatabase/23.3.0-Free/scripts/install.sh
diff --git a/OracleDatabase/23.5.0-Free/.gitattributes b/OracleDatabase/23.5.0-Free/.gitattributes
diff --git a/OracleDatabase/23.5.0-Free/db_installer.sha256 b/OracleDatabase/23.5.0-Free/db_installer.sha256
diff --git a/OracleDatabase/23.5.0-Free/scripts/install.sh b/OracleDatabase/23.5.0-Free/scripts/install.sh

Original file line number	Diff line number	Diff line change
`@@ -1 +1,2 @@`
`1`	`1`	`*.sh text eol=lf`
	`2`	`+*.sha256 text eol=lf`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+b5039fad2e4f92c68778dcabbd0b4622a6cb025f25f7d6222f9e9de53ebab531 */vagrant/oracle-xe-11.2.0-1.0.x86_64.rpm.zip`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+31fdc2af41687b4e547a3a18f796424d8c1af36406d2160f65b0af6a9cd47355 */vagrant/linuxamd64_12102_database_1of2.zip`
	`2`	`+03da14f5e875304b28f0f3bb02af0ec33227885b99c9865df70749d1e220accd */vagrant/linuxamd64_12102_database_2of2.zip`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+73873369753230f5a0921f95aceadb591388cb06ed72a7f3aea7bcbcea2403bc */vagrant/linuxamd64_12102_database_se2_1of2.zip`
	`2`	`+2492e1be1e3e3531da83d0843c09c08e435ac8cefd9a00c0df56be4f15ceebf3 */vagrant/linuxamd64_12102_database_se2_2of2.zip`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+96ed97d21f15c1ac0cce3749da6c3dac7059bb60672d76b008103fc754d22dde */vagrant/linuxx64_12201_database.zip`