From eeee81b2a83292fe12d9cb90144be14140544197 Mon Sep 17 00:00:00 2001
From: Zach Shepherd <zjs@users.noreply.github.com>
Date: Tue, 3 Jul 2018 15:30:31 -0700
Subject: [PATCH] Print file size and checksums before publishing (#1867)
 (#1875)

As documented in installer/docs/RELEASE.md, our process is to include
filesize and checksum information when publishing a release on GitHub.

Output that information in a structured way during the build process
to ensure that accurate information can be easily posted.

Include this output for all published builds to allow integrity to be
verified in all cases.

(cherry picked from commit 4459076366ff757c958a4fd71ba459fdab9f9509)
---
 .drone.yml                | 12 +++++++++---
 installer/docs/RELEASE.md |  8 ++++----
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/.drone.yml b/.drone.yml
index f3f4a56f8b..28c38015be 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -229,7 +229,9 @@ pipeline:
       - 'echo "Passed build will have artifact at https://storage.googleapis.com/vic-product-ova-builds/$TMP"'
       - 'echo "Renaming build artifact to $TMP..."'
       - 'mv vic-*.ova ../../bundle/$TMP'
-      - 'ls -l ../../bundle'
+      - 'cd ../../bundle'
+      - 'ls -l'
+      - 'echo "--------------------------------------------------"; stat --printf="Filesize (%n) = %s\n" $TMP; sha256sum --tag $TMP; sha1sum --tag $TMP; md5sum --tag $TMP'
     when:
       repo: vmware/vic-product
       event: [push, tag]
@@ -247,7 +249,9 @@ pipeline:
       - 'echo "Passed build will have artifact at https://storage.googleapis.com/vic-product-ova-builds/$TMP"'
       - 'echo "Renaming build artifact to $TMP..."'
       - 'mv vic-*.ova ../../bundle/$TMP'
-      - 'ls -l ../../bundle'
+      - 'cd ../../bundle'
+      - 'ls -l'
+      - 'echo "--------------------------------------------------"; stat --printf="Filesize (%n) = %s\n" $TMP; sha256sum --tag $TMP; sha1sum --tag $TMP; md5sum --tag $TMP'
     when:
       repo: vmware/vic-product
       event: [deployment]
@@ -265,7 +269,9 @@ pipeline:
       - 'TMP=$(echo vic-*.ova)'
       - 'echo "Passed build will have artifact at https://storage.googleapis.com/vic-product-ova-releases/$TMP"'
       - 'mv vic-*.ova ../../bundle/'
-      - 'ls -l ../../bundle'
+      - 'cd ../../bundle'
+      - 'ls -l'
+      - 'echo "--------------------------------------------------"; stat --printf="Filesize (%n) = %s\n" $TMP; sha256sum --tag $TMP; sha1sum --tag $TMP; md5sum --tag $TMP'
     when:
       repo: vmware/vic-product
       event: [deployment]
diff --git a/installer/docs/RELEASE.md b/installer/docs/RELEASE.md
index e436474963..eb4d2d6a3d 100644
--- a/installer/docs/RELEASE.md
+++ b/installer/docs/RELEASE.md
@@ -111,10 +111,10 @@ Description template for release candidates and releases:
 
 ```````
 ### [Download OVA](https://storage.googleapis.com/vic-product-ova-releases/vic-v1.4.0-rc3-4824-d99cbdb4.ova)
-Filesize: 
-SHA256:  
-SHA1: 
-MD5: 
+Filesize (vic-v1.4.0-rc3-4824-d99cbdb4.ova) = ...
+SHA256 (vic-v1.4.0-rc3-4824-d99cbdb4.ova) = ...
+SHA1 (vic-v1.4.0-rc3-4824-d99cbdb4.ova) = ...
+MD5 (vic-v1.4.0-rc3-4824-d99cbdb4.ova) = ...
 
 ### OVA will contain:
 ```