Check the k3s-root sha256sum

Signed-off-by: Manuel Buil <mbuil@suse.com>

Author: manuelbuil

scripts/download

@@ -25,7 +25,11 @@ mkdir -p ${DATA_DIR}
 case ${OS} in
   linux)
     git clone --single-branch --branch=${VERSION_RUNC} --depth=1 https://github.com/opencontainers/runc ${RUNC_DIR}
-    curl --compressed -sfL https://github.com/k3s-io/k3s-root/releases/download/${VERSION_ROOT}/k3s-root-${ARCH}.tar | tar xf -
+    K3S_ROOT_TAR="k3s-root-${ARCH}.tar"
+    curl --compressed -sfL https://github.com/k3s-io/k3s-root/releases/download/${VERSION_ROOT}/${K3S_ROOT_TAR} -o ${K3S_ROOT_TAR}
+    echo "${K3S_ROOT_SHA256}  ${K3S_ROOT_TAR}" | sha256sum -c
+    tar xf "${K3S_ROOT_TAR}"
+    rm -f "${K3S_ROOT_TAR}" sha256sum-${ARCH}.txt
     ;;
   windows)
     git clone --single-branch --branch=${VERSION_HCSSHIM} --depth=1 https://github.com/microsoft/hcsshim ${HCSSHIM_DIR}

scripts/version.sh

@@ -64,6 +64,24 @@ if [ -z "$VERSION_KUBE_ROUTER" ]; then
 fi
 
 VERSION_ROOT="v0.15.0"
+case ${ARCH} in
+    amd64)
+      K3S_ROOT_SHA256="20066815d9941185fce3934cc3bae2fa3e2dbb46ca7e63462efb2ea59f1b15c4"
+    ;;
+    arm)
+      K3S_ROOT_SHA256="2e43dac7750da52a756a9d4e8598d6e89937d565582660b26ca124bd9c8dbfaa"
+    ;;
+    arm64)
+      K3S_ROOT_SHA256="4bdfc715dc8b5e2c4956f8686b895a56386f4cc6468215dcd22130a680650577"
+    ;;
+    riscv64)
+      K3S_ROOT_SHA256="0e79998acaa156059ba1ff676a4e5f290069e25f799de43ee016a0e780f9d4d3"
+    ;;
+    *)
+      echo "[ERROR] unsupported architecture: ${ARCH}"
+      exit 1
+    ;;
+esac
 
 VERSION_HELM_JOB="v0.9.15-build20260324"