From 27424654b0654e1033581f9e17e27cb3a86c2920 Mon Sep 17 00:00:00 2001
From: Yacine31 <yacine.oumghar@gmail.com>
Date: Mon, 23 Jan 2023 06:53:53 +0100
Subject: [PATCH] ajout de checksum lors du download

---
 .../tasks/download_software.yml               | 30 +++++++++++--------
 .../tasks/install_database.yml                | 14 ++++++++-
 roles/oracle-db-install/tasks/main.yml        |  5 ++--
 3 files changed, 34 insertions(+), 15 deletions(-)

diff --git a/roles/oracle-db-install/tasks/download_software.yml b/roles/oracle-db-install/tasks/download_software.yml
index bd1537a..6e8fb38 100644
--- a/roles/oracle-db-install/tasks/download_software.yml
+++ b/roles/oracle-db-install/tasks/download_software.yml
@@ -1,25 +1,29 @@
 ---
-  - name: Téléchrgement des binaires 
-    become: yes
-    get_url:
-      url: https://kutt.axiome.io/m7EQg2p
-      dest: /u01/sources/{{oracle_zip_filename}}
-      mode: 0755
-      group: oinstall
-      owner: oracle
-    tags: download_sw
+#  - name: Téléchrgement des binaires 
+#    become: yes
+#    get_url:
+#      url: https://kutt.axiome.io/m7EQg2p
+#      dest: /u01/sources/{{oracle_zip_filename}}
+#      mode: 0755
+#      group: oinstall
+#      owner: oracle
+#      checksum: sha256:ba8329c757133da313ed3b6d7f86c5ac42cd9970a28bf2e6233f3235233aa8d8
+#      validate_certs: no
+#    tags: download_sw
 
-  - name: Téléchrgement OPatch
+  - name: Téléchargement OPatch
     become: yes
     get_url:
       url : https://kutt.axiome.io/opatch
       dest: /u01/sources/{{opatch_file}}
       mode: 0755
       group: oinstall
+      checksum: sha256:1d5f9b244a12f24efa16f851107f7b62426f10aa303ebb878928db6a8ca95a73
+      validate_certs: no
       owner: oracle
-    tags: download_sw
+    tags: download_opatch
 
-  - name: Téléchrgement du PSU
+  - name: Téléchargement du PSU
     become: yes
     get_url:
       url: https://kutt.axiome.io/db_ru
@@ -27,4 +31,6 @@
       mode: 0755
       group: oinstall
       owner: oracle
+      checksum: sha256:8628ba2ecc6a9d45e803e213eefafa2234cbd4e0e4a14c17bc46168bc7e155c8
+      validate_certs: no
     tags: download_sw
\ No newline at end of file
diff --git a/roles/oracle-db-install/tasks/install_database.yml b/roles/oracle-db-install/tasks/install_database.yml
index 212e86d..dbabacb 100644
--- a/roles/oracle-db-install/tasks/install_database.yml
+++ b/roles/oracle-db-install/tasks/install_database.yml
@@ -30,12 +30,24 @@
     failed_when: checkdbswinstall.stdout != "0"
     tags: checkifexists
 
+ - name: Téléchargement des binaires Oracle 
+    become: yes
+    get_url:
+      url: https://kutt.axiome.io/m7EQg2p
+      dest: /u01/sources/{{oracle_zip_filename}}
+      mode: 0755
+      group: oinstall
+      owner: oracle
+      checksum: sha256:ba8329c757133da313ed3b6d7f86c5ac42cd9970a28bf2e6233f3235233aa8d8
+      validate_certs: no
+    tags: download_sw
+
   - name: Extraction des binaires Oracle
     unarchive: src={{ oracle_sources }}/{{ oracle_zip_filename }}  dest={{ oracle_home }}
     become: true
     become_method: su
     become_user: oracle
-    tags: transfert
+    tags: extract
 
   - name: Copie du fichier de réponse pour installation silencieuse
     template: src=db_install_{{ oracle_version }}.j2 dest={{ oracle_sources }}/{{ db_response_file }}
diff --git a/roles/oracle-db-install/tasks/main.yml b/roles/oracle-db-install/tasks/main.yml
index 9c279c6..7ead1d2 100644
--- a/roles/oracle-db-install/tasks/main.yml
+++ b/roles/oracle-db-install/tasks/main.yml
@@ -3,12 +3,13 @@
 # installation des binaires ORACLE et patch
 #
 
-# telechargement des fihiers : oracle DB + opatch + PSU-RU
-  - include: download_software.yml
 
 # installation des binaires Oracle DB
   - include: install_database.yml
 
+# telechargement des fihiers : opatch + PSU-RU
+  - include: download_software.yml
+
 # Application du patch
   - include: opatch_apply.yml