Verifying archive integrity

Verifying archive integrity

Since version 1.18.3 there is a checksum file to verify the integrity of the downloaded salomon-release archive. When downloading Salomon from its official repository, verifying the downloaded file is not mandatory.

However, when downloading the archive from a different location, it might have been modified (in a not necessarily negative way), e.g. enhanced with additional color config files or whatever. As with any software, you should check it before running or installing it with superuser privileges.

In order to verify the integrity of the archive you have downloaded, you will need the corresponding checksum file.

Verification example

For example, if you want to verify the file salomon-release-1.18.3.tar.gz, download the checksum file salomon-release-1.18.3.tar.gz.sha256 directly from the assets of the official release.

Then, copy the checksum file into the same directory from the archive. Next, open a shell in that directory (or navigate there) and execute the following command:

sha256sum -c salomon-release-1.18.3.tar.gz.sha256

In case the archive is identical with the one from the official release, the command will confirm this as follows:

salomon-release-1.18.3.tar.gz: OK

Top