AWS pcs medium security documentation change
Summary
Updated Slurm version references from 25.05.4 to 25.05.5 and added new installer entries for Slurm 25.05.5-1 and 24.11.7-1
Security assessment
Added new installer versions with SHA256 checksums. Maintaining updated checksums prevents execution of tampered installers, addressing supply chain security risks. The explicit checksum verification instructions mitigate MITM attacks.
Diff
diff --git a/pcs/latest/userguide/working-with_ami_installers.md b/pcs/latest/userguide/working-with_ami_installers.md index 6badfbe27..138738235 100644 --- a//pcs/latest/userguide/working-with_ami_installers.md +++ b//pcs/latest/userguide/working-with_ami_installers.md @@ -120 +120 @@ If the checksums don't match, don't run the installation script. Contact [Suppor -For example, the following command generates the SHA256 checksum for the Slurm 25.05.4-1 tarball. +For example, the following command generates the SHA256 checksum for the Slurm 25.05.5-1 tarball. @@ -123 +123 @@ For example, the following command generates the SHA256 checksum for the Slurm 2 - $ sha256sum aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz + $ sha256sum aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz @@ -128 +128 @@ Example output: - 3b0f93bce441d4f4f6935175f2c1e81cd961cb923adb416fa6689f5592047a7d aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz + 3b0f93bce441d4f4f6935175f2c1e81cd961cb923adb416fa6689f5592047a7d aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz @@ -225,0 +226,10 @@ Slurm installer Installer | Download URL | SHA256 checksum +Slurm 25.05.5-1 | + + + https://aws-pcs-repo-us-east-1.s3.us-east-1.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz + +| + + + e7bc84db4e71b8c7174e2f581a31233f839affb5306c76a8adba23204dcc703b + @@ -245,0 +256,10 @@ Slurm 25.05.3-1 | +Slurm 24.11.7-1 | + + + https://aws-pcs-repo-us-east-1.s3.us-east-1.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-24.11-installer-24.11.7-1.tar.gz + +| + + + 73d75be82c6f88f6e248fd0cc779a5630c62d91ebabdd9cf0f61b1943b6d7d09 +