How to verify the Installer bootstrapper for Terraform Enterprise

Introduction

When performing an airgapped installation of Terraform Enterprise, you may need to verify the integrity of the Installer Bootstrapper file to ensure it has not been altered. This guide provides the procedure to verify the file's MD5 checksum against the official checksum stored with the object in Amazon S3.

Expected Outcome

After completing this procedure, you will have confirmed that the MD5 checksum of your downloaded installer matches the official checksum, verifying the file's integrity.

Prerequisites

• Access to a command-line interface.
• The following utilities installed:
  • wget or a similar tool to download files.
  • md5 or md5sum to calculate the checksum.
  • curl to inspect HTTP headers.

Procedure

Follow these steps to download the installer and verify its checksum.

1. Download the Installer Bootstrapper.

   $ wget https://install.terraform.io/airgap/latest.tar.gz

2. Calculate the MD5 checksum of the downloaded file.

   $ md5 latest.tar.gz

   The command returns the checksum. Note that your utility may be md5sum and the output format may vary slightly.

   Example output:

   MD5 (latest.tar.gz) = f89bc7d66124fa8791475589666b8151

3. Retrieve the official checksum from the ETag header of the S3 object.

   $ curl https://s3.amazonaws.com/replicated-airgap-work/replicated.tar.gz --head | grep -i etag

   The ETag for this object corresponds to its MD5 checksum.

   Example output:

   ETag: "f89bc7d66124fa8791475589666b8151"

4. Compare the two checksums. The value from step 2 should match the value inside the quotes from step 3. If they match, the file's integrity is verified.

Additional Information

• For more information on airgapped Terraform Enterprise installations, refer to the Terraform Enterprise airgapped installation documentation.