arcbox-image 0.9.0

Boot-asset and machine-image management for ArcBox
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

use super::{BootAssetProvider, BootAssets};
use crate::error::{ImageError, Result};

impl BootAssetProvider {
    /// Verifies cached boot assets without downloading or updating the cache.
    pub async fn verified_cached_assets(&self) -> Result<BootAssets> {
        let config = self.config();
        let manifest = self.read_cached_manifest_required().await?;
        if manifest.schema_version != arcbox_boot::manifest::schema_version_for(&config.version) {
            return Err(ImageError::config(
                "cached boot manifest has an unsupported schema",
            ));
        }
        let target = manifest.targets.get(&config.arch).ok_or_else(|| {
            ImageError::config(format!(
                "cached boot manifest lacks architecture {}",
                config.arch
            ))
        })?;
        let directory = config.version_cache_dir();
        let kernel = config
            .custom_kernel
            .clone()
            .unwrap_or_else(|| directory.join("kernel"));
        let rootfs_image = directory.join("rootfs.erofs");
        for (path, hash) in [
            (
                &kernel,
                config
                    .custom_kernel
                    .is_none()
                    .then_some(&target.kernel.sha256),
            ),
            (&rootfs_image, Some(&target.rootfs.sha256)),
        ] {
            if !tokio::fs::metadata(path).await?.is_file() {
                return Err(ImageError::config(format!(
                    "boot asset is not a regular file: {}",
                    path.display()
                )));
            }
            if let Some(expected) = hash {
                let actual = arcbox_boot::util::sha256_file_async(path)
                    .await
                    .map_err(|error| {
                        ImageError::config(format!("verify {}: {error}", path.display()))
                    })?;
                if actual != *expected {
                    return Err(ImageError::config(format!(
                        "boot asset SHA256 mismatch: {}",
                        path.display()
                    )));
                }
            }
        }
        Ok(BootAssets {
            kernel,
            rootfs_image,
            cmdline: target.kernel_cmdline.clone(),
            version: config.version.clone(),
            manifest,
        })
    }
}