Check that redis archive matches hash (#450)

Redis is downloaded without TLS

diff --git a/image/base/install-redis b/image/base/install-redis
index e2cc22d72b920253d4ffc6ec43564f75ef2aba09..d6affb35575133b1455eaf57069f85abbcade658 100755 (executable)
--- a/image/base/install-redis
+++ b/image/base/install-redis
@@ -1,11 +1,13 @@
 #!/bin/bash
 set -e
 REDIS_VERSION=5.0.5
+REDIS_HASH="2139009799d21d8ff94fc40b7f36ac46699b9e1254086299f8d3b223ca54a375"
 
 cd /tmp
 
 # Prepare Redis source.
 wget http://download.redis.io/releases/redis-$REDIS_VERSION.tar.gz
+echo "$REDIS_HASH redis-$REDIS_VERSION.tar.gz" | sha256sum -c
 tar zxf redis-$REDIS_VERSION.tar.gz
 cd redis-$REDIS_VERSION