0

I want to install Azure azcopy on a Ubuntu 20.04 and be certain that it comes from a legit source (not infected, corrupted etc).

Recommended way is to download it from MS site - at least according to MS docs. However - how can I verify it's authenticity ? Is there a way to verify checksum for the file I download from this link ?

Ideal way for me would be to be able to install it using `apt install' but I could't figure it out yesterday; I was trying to use this tutorial - I just changed the repo to 'focal' but azcopy package isn't a part of it :(

Is there an official repo for 20.04 that contains azcopy ?

I'm open for any suggestions - my goal is - to have a legit azcopy binary on the system.

Wojtek_B
  • 1,013
  • 4
  • 14
  • Why do you think a download from a repo is more legit than an https (therefore with publisher verification) download? It lacks some hash verification, but if it's not the original publisher who provides the package with checksums it won't have any benefit in terms of "being legit" – Marc Wittke Jul 26 '23 at 11:40
  • Our company unwritten rule is that we don't use any binaries downloaded from internet in production. As a compromise for the moment I'm just using `tar -tf filename` to check if it really consists azcopy inside. I'd love to have something better though. – Wojtek_B Jul 27 '23 at 10:04

0 Answers0