Dell ObjectScale Application 1.3.x Installation Guide for Red Hat OpenShift

Verify the downloaded files needed to install ObjectScale on an offline cluster

1. On a local Linux workstation, verify the signatures file.

   openssl dgst -sha256 -verify obs-public-1.3.0.pem -signature ./objectscale-signatures-1.3.0.tgz.signed.bin objectscale-signatures-1.3.0.tgz

   When successful, the signature validation returns Verified OK.
2. Expand the signature bundle files into a signatures subdirectory:
   1. Make a new subdirectory names signatures.

       mkdir signatures

   2. Expand the objectscale-signatures-1.3.0.tgz into this subdirectory.

      tar xvf objectscale-signatures-1.3.0.tgz -C signatures

      As an example, the output for the 1.3.0 ObjectScale release is shown:

      ./objectscale-images-1.3.0.tgz.02.signed.bin
      ./OBJECTSCALE_CE_30TB.xml.signed.bin
      ./objectscale-images-mgt-1.3.0.sh.signed.bin
      ./objectscale-images-1.3.0.tgz.05.signed.bin
      ./obs-public-1.3.0.pem.signed.bin
      ./objectscale-images-1.3.0.tgz.06.signed.bin
      ./objectscale-online-image-digests-1.3.0.txt.signed.bin
      ./dellemc-csi-helm-charts-1.3.0-121.2e006fb.tgz.signed.bin
      ./objectscale-verify-online-digests-1.3.0.sh.signed.bin
      ./objectscale-images-1.3.0.tgz.03.signed.bin
      ./objectscale-images-1.3.0.tgz.04.signed.bin
      ./objectscale-helm-charts-1.3.0.tgz.signed.bin
      ./objectscale-manifest-1.3.0.json.signed.bin
      ./objectscale-images-1.3.0.tgz.00.signed.bin
      ./objectscale-images-1.3.0.tgz.01.signed.bin

3. Verify the public key file:

   openssl dgst -sha256 -verify obs-public-1.3.0.pem -signature signatures/obs-public-1.3.0.pem.signed.bin obs-public-1.3.0.pem

   When successful, the signature validation returns Verified OK.
4. Once you have validated that the obs-public-1.3.0.pem is valid, you can use that file to verify each of the other downloaded files:

   openssl dgst -sha256 -verify obs-public-1.3.0.pem -signature signatures/<SIGNED.BIN_FILENAME> <DOWNLOADED_FILENAME>

   For example, to verify the OBJECTSCALE_CE_30TB.xml file, you would use the following command:

   openssl dgst -sha256 -verify obs-public-1.3.0.pem -signature signatures/OBJECTSCALE_CE_30TB.xml.signed.bin OBJS_FREE_30TB_5307094_18-Oct-2021.xml

   Repeat this process for all other downloaded files.

5. After validating the downloaded files, move the objectscale-signatures-1.3.0.tgz.signed.bin into the signatures directory.

   mv objectscale-signatures-1.3.0.tgz.signed.bin ./signatures