From 7664539ad768156b2f8cec823ebae951797f98e5 Mon Sep 17 00:00:00 2001
From: Simon Fels <morphis@gravedo.de>
Date: Wed, 30 May 2018 10:20:22 +0200
Subject: [PATCH] Always verify the hash of the Android image during the build

---
 snap/snapcraft.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/snap/snapcraft.yaml b/snap/snapcraft.yaml
index 2602396..377455a 100644
--- a/snap/snapcraft.yaml
+++ b/snap/snapcraft.yaml
@@ -72,6 +72,7 @@ parts:
           x86_64)
             IMAGE_PATH="2018/05/23"
             IMAGE_NAME="android_amd64.img"
+            IMAGE_HASH="cbcb8c4740ed38dbc243122df2d8d87511a9c8dcc162781f2eabb5dc1ea079fe"
             ;;
           *)
             echo "ERROR: Unknown architecture $ARCH"
@@ -83,6 +84,10 @@ parts:
         # expects the downloaded file to be an archive it can extract.
         echo "Downloading image..."
         wget http://build.anbox.io/android-images/$IMAGE_PATH/$IMAGE_NAME
+
+        echo "$IMAGE_HASH $IMAGE_NAME" > image-hash
+        sha256sum -c image-hash
+
         mv $IMAGE_NAME $SNAPCRAFT_PART_INSTALL/android.img
 
       fi