|
|
#!/bin/bash |
|
|
set -euo pipefail |
|
|
|
|
|
MODEL_FILE="model.safetensors" |
|
|
SHA_FILE="model.safetensors.sha256" |
|
|
SIG_FILE="model.safetensors.sig" |
|
|
|
|
|
if [ ! -f "$MODEL_FILE" ]; then |
|
|
echo "Model file not found: $MODEL_FILE" |
|
|
exit 1 |
|
|
fi |
|
|
|
|
|
if [ ! -f "$SHA_FILE" ]; then |
|
|
echo "SHA file not found: $SHA_FILE" |
|
|
exit 1 |
|
|
fi |
|
|
|
|
|
echo "Verifying SHA-256 checksum..." |
|
|
sha256sum -c "$SHA_FILE" |
|
|
|
|
|
if [ -f "$SIG_FILE" ]; then |
|
|
echo "Verifying PGP signature (requires maintainer public key installed)..." |
|
|
gpg --verify "$SIG_FILE" "$MODEL_FILE" |
|
|
else |
|
|
echo "Signature file not found: $SIG_FILE (skipping signature verification)" |
|
|
fi |
|
|
|
|
|
echo "Verification complete." |
|
|
|
