mirror of
https://github.com/opentofu/opentofu.git
synced 2024-12-28 01:41:48 -06:00
e6e0b6ee46
Previously we were only verifying locked hashes for local archive zip files, but if we have non-ziphash hashes available then we can and should also verify that a local directory matches at least one of them. This does mean that folks using filesystem mirrors but yet also running Terraform across multiple platforms will need to take some extra care to ensure the hashes pass on all relevant platforms, which could mean using "terraform providers lock" to pre-seed their lock files with hashes across all platforms, or could mean using the "packed" directory layout for the filesystem mirror so that Terraform will end up in the install-from-archive codepath instead of this install-from-directory codepath, and can thus verify ziphash too. (There's no additional documentation about the above here because there's already general information about this in the lock file documentation due to some similar -- though not identical -- situations with network mirrors.) |
||
|---|---|---|
| .. | ||
| copy | ||
| depsfile | ||
| didyoumean | ||
| earlyconfig | ||
| getproviders | ||
| initwd | ||
| logging | ||
| modsdir | ||
| providercache | ||
| replacefile | ||
| tfplugin5 | ||
| typeexpr | ||