Checksum.sh is a simple way to download, review, and verify install scripts. If the checksum is OK the script will be printed to stdout, which can be piped to sh or elsewhere. If the checksum doesn't match it produces an error and nothing is piped. View the code on GitHub.

For example, to install Rust:

checksum https://sh.rustup.rs 8327fa6ce106d2a387fdd02cb95c3607193c2edb | sh

In contrast to Rust's usual installation which doesn't verify the checksum:

curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

Option 1: Define the checksum function directly

Paste the following into your command line to define the checksum function.

function checksum() {
  s=$(curl -fsSL "$1")
  if ! command -v shasum >/dev/null
  then
    shasum() { sha1sum "$@"; }
  fi
  c=$(printf %s\\n "$s" | shasum | awk '{print $1}')
  if [ "$c" = "$2" ]
  then
    printf %s\\n "$s"
  else
    echo "invalid checksum $c != $2" 1>&2;
  fi
  unset s
  unset c
}

Option 2: Download the script

Alternatively, you can download, review and verify the checksum.sh script:

curl -O https://checksum.sh/checksum.sh
cat checksum.sh
echo "26f0b74833d2b98c72c09dcb46f10eab18ac57a3  checksum.sh" | shasum -c

If everything is OK, you can source the script which will define the checksum function.

source checksum.sh

To download and verify a script pass the URL and the CHECKSUM:

checksum <URL> <CHECKSUM>

The script will be printed out by default so you can inspect it.

If you're happy with it, you can pipe the script to sh to execute it:

checksum <URL> <CHECKSUM> | sh

If you just want to calculate the checksum for a URL you can omit the CHECKSUM:

checksum <URL>

Note: If any of these install scripts have changed these commands will error because the checksum will be invalid.

checksum https://sh.rustup.rs 8327fa6ce106d2a387fdd02cb95c3607193c2edb | sh

checksum https://raw.githubusercontent.com/capeprivacy/cli/main/install.sh 2309498bc07fbca42d421f696a605da15d99d939 | sh

checksum https://raw.githubusercontent.com/capeprivacy/nitrogen/main/install.sh 8012d9e1d1420942f0ae6955fc99c790d52e9c3e | sh

checksum https://nixos.org/nix/install 84b31e0093aaa169c1f580c2fbe2397d059d1983 | sh

checksum https://deno.land/install.sh 57a4d67e64d2a7204541b9e131cedb289a79e834 | sh