checksum validation

tasks/client.yml

@@ -6,6 +6,7 @@
     owner: "root"
     group: "root"
     mode: 0755
+    checksum: "sha256:{{ minio_client_checksum }}"
   register: _download_client
   until: _download_client is succeeded
   retries: 5

tasks/preflight.yml

@@ -1,12 +1,22 @@
 ---
-- name: Compose Minio download url
-  set_fact:
-    minio_server_download_url: "https://dl.minio.io/server/minio/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/minio"
+- block:
+    - name: Compose Minio download url
+      set_fact:
+        minio_server_download_url: "https://dl.minio.io/server/minio/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/minio"
+
+    - name: "Minio server checksum for {{ go_arch_map[ansible_architecture] | default(ansible_architecture) }} architecture"
+      set_fact:
+        minio_server_checksum: "{{ lookup('url', minio_server_download_url + '.sha256sum').split(' ')[0] }}"
   when:
     - minio_install_server
 
-- name: Compose MC download url
-  set_fact:
-    minio_client_download_url: "https://dl.minio.io/client/mc/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/mc"
+- block:
+    - name: Compose MC download url
+      set_fact:
+        minio_client_download_url: "https://dl.minio.io/client/mc/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/mc"
+
+    - name: "Minio client checksum for {{ go_arch_map[ansible_architecture] | default(ansible_architecture) }} architecture"
+      set_fact:
+        minio_client_checksum: "{{ lookup('url', minio_client_download_url + '.sha256sum').split(' ')[0] }}"
   when:
     - minio_install_client

tasks/server.yml

@@ -27,6 +27,7 @@
     owner: "root"
     group: "root"
     mode: 0755
+    checksum: "sha256:{{ minio_server_checksum }}"
   register: _download_server
   until: _download_server is succeeded
   retries: 5