| | #!/bin/bash |
| | set -euo pipefail |
| |
|
| | MODEL_FILE="model.safetensors" |
| | SHA_FILE="model.safetensors.sha256" |
| | SIG_FILE="model.safetensors.sig" |
| |
|
| | if [ ! -f "$MODEL_FILE" ]; then |
| | echo "Model file not found: $MODEL_FILE" |
| | exit 1 |
| | fi |
| |
|
| | if [ ! -f "$SHA_FILE" ]; then |
| | echo "SHA file not found: $SHA_FILE" |
| | exit 1 |
| | fi |
| |
|
| | echo "Verifying SHA-256 checksum..." |
| | sha256sum -c "$SHA_FILE" |
| |
|
| | if [ -f "$SIG_FILE" ]; then |
| | echo "Verifying PGP signature (requires maintainer public key installed)..." |
| | gpg --verify "$SIG_FILE" "$MODEL_FILE" |
| | else |
| | echo "Signature file not found: $SIG_FILE (skipping signature verification)" |
| | fi |
| |
|
| | echo "Verification complete." |
| |
|