verify-golangci-lint.sh: sha256sum --check does not work on MacOS

[justinsb]

What happened:

We updated golangci, and now verify the sha256sum of the script (yay!)

However, the verification does not work on MacOS, because their sha256sum does not support --check.

[justinsb]

I wonder if we have any interest in creating a simple go tool that can download things by checksum? It feels very much in sig-release scope.

I was thinking about something like kubernetes/kops#17240

The idea would be that you could pass hget sha256:val urls... and it would go download from the canonical URLs, check the sums etc. It's a trivial program to write and I figure artifact distribution would be so much better (particularly if we one day got it into the distros)

The "killer feature" here I think would be to also support extensions, possibly things like hget-gcs or hget-s3, or maybe a directory of extensions, so that we could fetch from local mirrors easily.

Another thing I think would be awesome is if we supported transparency logs (rekor?), so we could go from artifact name -> sha -> download from mirrors (including user configured ones and ones in rekor).

cc @cpanato

[cpanato]

sounds good, can be this tool life in their own repo and then maybe we can create github actions and all the ecosystem around that, wdyt?

[cpanato]

my workflow here (as workaround) I never use the ./hack script to run golangci-lint I use the one I have installed :)

[k8s-triage-robot]

The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

This bot triages un-triaged issues according to the following rules:

• After 90d of inactivity, lifecycle/stale is applied
• After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
• After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

You can:

• Mark this issue as fresh with /remove-lifecycle stale
• Close this issue with /close
• Offer to help out with Issue Triage

Please send feedback to sig-contributor-experience at kubernetes/community.

/lifecycle stale