From 2693ec2f8c05dd720d96880867896ca5cefeb8b5 Mon Sep 17 00:00:00 2001
From: Ettore Di Giacinto <mudler@gentoo.org>
Date: Sun, 29 Dec 2019 13:58:49 +0100
Subject: [PATCH] Consume artifact verify mechanism

Refers to #28
---
 pkg/installer/installer.go | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkg/installer/installer.go b/pkg/installer/installer.go
index f3bd6c44..d086fb11 100644
--- a/pkg/installer/installer.go
+++ b/pkg/installer/installer.go
@@ -265,6 +265,11 @@ func (l *LuetInstaller) installPackage(a ArtifactMatch, s *System) error {
 	artifact, err := a.Repository.Client().DownloadArtifact(a.Artifact)
 	defer os.Remove(artifact.GetPath())
 
+	err = artifact.Verify()
+	if err != nil {
+		return errors.Wrap(err, "Artifact integrity check failure")
+	}
+
 	files, err := artifact.FileList()
 	if err != nil {
 		return errors.Wrap(err, "Could not open package archive")