# CKS-013 — Verify a kubelet binary

Domain: **1.5 Platform binary verification**  
Time: **2 minutes** · Reward: **100 XP clean win**

## Task

Files:

```text
/opt/release/kubelet
/opt/release/kubelet.sha256    # raw official hash only
```

Write commands to:

1. verify the binary with `sha256sum --check`;
2. after observing `OK`, install it at `/usr/local/bin/kubelet` as `root:root` with mode `0755` using `install`;
3. show its version and installed mode/owner.

No conditional shell scripting is required.

## Section B — scored answer

```bash
echo "$(cat /opt/release/kubelet.sha256)  /opt/release/kubelet" | sha256sum --check
echo "if ok"
install -o root -g root -m 0755 /opt/release/kubelet /usr/local/bin/kubelet
stat /usr/local/bin/kubelet
/usr/local/bin/kubelet --version
```

Say **Grade CKS-013** when saved.