onelf-sysroot 0.5.0

//! The three tiers that take files out of a closure.
//!
//! A closure is complete by construction and therefore too large. The
//! platform line names what the host supplies; the policy names what never
//! ships; a trace, when the publisher has one, names what a test run did
//! not touch. Each tier is a plain text file so it can be published,
//! diffed and shared.

use std::collections::{BTreeSet, HashSet};
use std::io;
use std::path::Path;

/// Soname prefixes the host is expected to provide.
#[derive(Debug, Default, Clone)]
pub struct PlatformLine {
    prefixes: Vec<String>,
}

/// Glob patterns over paths relative to the root that never ship.
#[derive(Debug, Default)]
pub struct Policy {
    patterns: Vec<glob::Pattern>,
}

/// Paths a test run opened, relative to the root.
#[derive(Debug, Default)]
pub struct Trace {
    opened: BTreeSet<String>,
    opened_dirs: BTreeSet<String>,
}

/// What pruning kept and why the rest went.
#[derive(Debug, Default, PartialEq, Eq)]
pub struct Pruned {
    pub kept: Vec<String>,
    /// Basenames of the files the platform line removed.
    pub host_provided: Vec<String>,
    pub removed_platform: usize,
    pub removed_policy: usize,
    pub removed_trace: usize,
}

/// Non-empty, non-comment lines of a tier file.
fn read_lines(path: &Path) -> io::Result<Vec<String>> {
    let text = std::fs::read_to_string(path)
        .map_err(|e| io::Error::new(e.kind(), format!("{}: {e}", path.display())))?;
    Ok(text
        .lines()
        .map(str::trim)
        .filter(|l| !l.is_empty() && !l.starts_with('#'))
        .map(String::from)
        .collect())
}

impl PlatformLine {
    pub fn load(path: &Path) -> io::Result<Self> {
        Ok(Self::from_prefixes(read_lines(path)?))
    }

    pub fn from_prefixes(prefixes: Vec<String>) -> Self {
        PlatformLine { prefixes }
    }

    pub fn prefixes(&self) -> &[String] {
        &self.prefixes
    }

    /// Whether the file at `rel` is on the platform line, by basename.
    pub fn matches(&self, rel: &str) -> bool {
        let name = rel.rsplit('/').next().unwrap_or(rel);
        self.prefixes.iter().any(|p| name.starts_with(p.as_str()))
    }

    /// Whether `soname` is on the platform line.
    pub fn matches_soname(&self, soname: &str) -> bool {
        self.prefixes.iter().any(|p| soname.starts_with(p.as_str()))
    }
}

impl Policy {
    pub fn load(path: &Path) -> io::Result<Self> {
        let mut patterns = Vec::new();
        for line in read_lines(path)? {
            let pattern = glob::Pattern::new(line.trim_start_matches('/')).map_err(|e| {
                io::Error::new(
                    io::ErrorKind::InvalidData,
                    format!("{}: {line}: {e}", path.display()),
                )
            })?;
            patterns.push(pattern);
        }
        Ok(Policy { patterns })
    }

    /// Whether `rel` matches a pattern. `*` stays within one directory
    /// and `**` crosses them, so `usr/lib/*.so` names nothing in a
    /// subdirectory of `usr/lib`.
    pub fn matches(&self, rel: &str) -> bool {
        let options = glob::MatchOptions {
            case_sensitive: true,
            require_literal_separator: true,
            require_literal_leading_dot: false,
        };
        self.patterns.iter().any(|p| p.matches_with(rel, options))
    }
}

impl Trace {
    /// Read a trace: one path per line, absolute or relative to the root.
    pub fn load(path: &Path) -> io::Result<Self> {
        Ok(Self::from_paths(read_lines(path)?))
    }

    pub fn from_paths(paths: Vec<String>) -> Self {
        let mut trace = Trace::default();
        for p in paths {
            let rel = p.trim_start_matches('/').to_string();
            if let Some((dir, _)) = rel.rsplit_once('/') {
                trace.opened_dirs.insert(dir.to_string());
            }
            trace.opened.insert(rel);
        }
        trace
    }

    /// Whether `rel` survives: it was opened, or a file beside it was.
    ///
    /// The sibling rule is for plugin directories, where a run loads one
    /// member by name and the next run another. The flat system
    /// directories hold everything and are always touched, so there it
    /// would keep all of them; a library or a tool in one of those
    /// survives on its own account only.
    fn keeps(&self, rel: &str) -> bool {
        if self.opened.contains(rel) {
            return true;
        }
        match rel.rsplit_once('/') {
            Some((dir, _)) => !is_flat_system_dir(dir) && self.opened_dirs.contains(dir),
            None => false,
        }
    }
}

/// The directories a distribution keeps flat and full: what a run opened
/// there says nothing about what sits beside it.
fn is_flat_system_dir(dir: &str) -> bool {
    matches!(dir, "usr/bin" | "usr/sbin" | "bin" | "sbin") || crate::LIB_DIRS.contains(&dir)
}

/// The topmost directory of the Python package `rel` belongs to: every
/// directory from it down to the file's own holds an `__init__.py`.
fn package_root<'a>(rel: &'a str, init_dirs: &HashSet<&str>) -> Option<&'a str> {
    let (mut dir, _) = rel.rsplit_once('/')?;
    if !init_dirs.contains(dir) {
        return None;
    }
    while let Some((parent, _)) = dir.rsplit_once('/')
        && init_dirs.contains(parent)
    {
        dir = parent;
    }
    Some(dir)
}

/// Apply the tiers to `files`, relative paths in any order. `keep_names`
/// survive the trace regardless: a basename, the soname some bundled
/// object needs, keeps every file so named, and a path, holding a slash,
/// keeps that one file. `keep` are globs the trace may not prune.
///
/// A Python package is kept whole once the trace opened anything in it:
/// its modules are imported lazily, so file granularity there would cut
/// what the next run needs.
pub fn prune(
    files: &[String],
    platform: Option<&PlatformLine>,
    policy: Option<&Policy>,
    trace: Option<&Trace>,
    keep_names: &HashSet<String>,
    keep: Option<&Policy>,
) -> Pruned {
    let mut out = Pruned::default();
    let mut sorted: Vec<&String> = files.iter().collect();
    sorted.sort();
    sorted.dedup();

    let init_dirs: HashSet<&str> = sorted
        .iter()
        .filter_map(|rel| rel.strip_suffix("/__init__.py"))
        .collect();
    let opened_packages: HashSet<&str> = trace
        .map(|t| {
            t.opened
                .iter()
                .filter_map(|rel| package_root(rel, &init_dirs))
                .collect()
        })
        .unwrap_or_default();

    for rel in sorted {
        let name = rel.rsplit('/').next().unwrap_or(rel);
        if platform.is_some_and(|p| p.matches(rel)) {
            out.removed_platform += 1;
            out.host_provided.push(name.to_string());
            continue;
        }
        if policy.is_some_and(|p| p.matches(rel)) {
            out.removed_policy += 1;
            continue;
        }
        if let Some(trace) = trace
            && !trace.keeps(rel)
            && !keep_names.contains(name)
            && !keep_names.contains(rel.as_str())
            && !keep.is_some_and(|k| k.matches(rel))
            && !package_root(rel, &init_dirs).is_some_and(|root| opened_packages.contains(root))
        {
            out.removed_trace += 1;
            continue;
        }
        out.kept.push(rel.clone());
    }
    out.host_provided.sort();
    out.host_provided.dedup();
    out
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::db::fixture::temp_root;

    fn files() -> Vec<String> {
        [
            "usr/bin/app",
            "usr/lib/libfixture.so.1",
            "usr/lib/libnvidia-glcore.so.550",
            "usr/lib/plugins/a.so",
            "usr/lib/plugins/b.so",
            "usr/share/doc/app/README",
            "usr/share/locale/de/LC_MESSAGES/app.mo",
            "usr/share/man/man1/app.1",
        ]
        .iter()
        .map(|s| s.to_string())
        .collect()
    }

    #[test]
    fn the_platform_line_removes_and_records() {
        let root = temp_root("platform");
        let path = root.join("platform-line.txt");
        std::fs::write(&path, "# host drivers\nlibnvidia\nlibGL.so\n").unwrap();
        let line = PlatformLine::load(&path).unwrap();
        let out = prune(&files(), Some(&line), None, None, &HashSet::new(), None);
        assert_eq!(out.removed_platform, 1);
        assert_eq!(out.host_provided, ["libnvidia-glcore.so.550"]);
        assert!(!out.kept.iter().any(|f| f.contains("nvidia")));
        assert_eq!(out.kept.len(), files().len() - 1);
        assert!(line.matches_soname("libGL.so.1"));
    }

    #[test]
    fn the_policy_removes_documentation_and_nothing_else() {
        let root = temp_root("policy");
        let path = root.join("policy.txt");
        std::fs::write(&path, "usr/share/doc/**\n/usr/share/man/**\n").unwrap();
        let policy = Policy::load(&path).unwrap();
        let out = prune(&files(), None, Some(&policy), None, &HashSet::new(), None);
        assert_eq!(out.removed_policy, 2);
        assert!(out.kept.iter().any(|f| f.ends_with("app.mo")));
        assert!(!out.kept.iter().any(|f| f.contains("share/doc")));
        assert!(!out.kept.iter().any(|f| f.contains("share/man")));
    }

    #[test]
    fn a_star_stays_within_one_directory() {
        let root = temp_root("policystar");
        let path = root.join("policy.txt");
        std::fs::write(&path, "usr/lib/lib*.so\nusr/share/**/*.mo\n").unwrap();
        let policy = Policy::load(&path).unwrap();
        assert!(policy.matches("usr/lib/libfoo.so"));
        assert!(!policy.matches("usr/lib/libreoffice/program/libmergedlo.so"));
        assert!(policy.matches("usr/share/locale/de/LC_MESSAGES/app.mo"));
    }

    #[test]
    fn a_bad_pattern_names_the_file_and_line() {
        let root = temp_root("badpolicy");
        let path = root.join("policy.txt");
        std::fs::write(&path, "usr/[\n").unwrap();
        let err = Policy::load(&path).unwrap_err();
        assert!(err.to_string().contains("usr/["), "{err}");
    }

    #[test]
    fn the_trace_keeps_opened_files_their_siblings_and_needed_names() {
        let trace = Trace::from_paths(vec!["/usr/bin/app".into(), "/usr/lib/plugins/a.so".into()]);
        let keep: HashSet<String> = ["libfixture.so.1".to_string()].into_iter().collect();
        let out = prune(&files(), None, None, Some(&trace), &keep, None);
        assert!(out.kept.contains(&"usr/bin/app".to_string()));
        assert!(
            out.kept.contains(&"usr/lib/plugins/b.so".to_string()),
            "sibling kept"
        );
        assert!(
            out.kept.contains(&"usr/lib/libfixture.so.1".to_string()),
            "needed kept"
        );
        assert!(
            !out.kept.iter().any(|f| f.ends_with("app.mo")),
            "unopened removed"
        );
        assert_eq!(out.removed_trace, files().len() - 4);
    }

    #[test]
    fn a_kept_path_keeps_that_file_alone() {
        let files: Vec<String> = [
            "usr/share/icons/a/index.theme",
            "usr/share/icons/b/index.theme",
        ]
        .iter()
        .map(|s| s.to_string())
        .collect();
        let trace = Trace::from_paths(vec!["/usr/bin/app".into()]);
        let keep: HashSet<String> = ["usr/share/icons/a/index.theme".to_string()]
            .into_iter()
            .collect();
        let out = prune(&files, None, None, Some(&trace), &keep, None);
        assert_eq!(out.kept, ["usr/share/icons/a/index.theme"]);
    }

    #[test]
    fn no_trace_means_no_pruning() {
        let out = prune(&files(), None, None, None, &HashSet::new(), None);
        assert_eq!(out.kept.len(), files().len());
        assert_eq!(out.removed_trace, 0);
    }

    #[test]
    fn a_trace_keeps_python_packages_whole_and_honours_keep_globs() {
        let files: Vec<String> = [
            "usr/lib/python3/site-packages/pkg/__init__.py",
            "usr/lib/python3/site-packages/pkg/sub/__init__.py",
            "usr/lib/python3/site-packages/pkg/sub/lazy.py",
            "usr/lib/python3/site-packages/other/__init__.py",
            "usr/lib/python3/site-packages/other/never.py",
            "usr/share/app/icons/a.svg",
            "usr/share/app/icons/b.svg",
            "usr/share/app/data/unused.dat",
        ]
        .iter()
        .map(|s| s.to_string())
        .collect();
        let trace = Trace::from_paths(vec![
            "/usr/lib/python3/site-packages/pkg/__init__.py".into(),
        ]);
        let root = temp_root("keep");
        std::fs::write(root.join("keep.txt"), "usr/share/app/icons/**\n").unwrap();
        let keep = Policy::load(&root.join("keep.txt")).unwrap();
        let pruned = prune(
            &files,
            None,
            None,
            Some(&trace),
            &HashSet::new(),
            Some(&keep),
        );
        let kept: Vec<&str> = pruned.kept.iter().map(String::as_str).collect();
        assert!(
            kept.contains(&"usr/lib/python3/site-packages/pkg/sub/lazy.py"),
            "{kept:?}"
        );
        assert!(
            !kept.contains(&"usr/lib/python3/site-packages/other/never.py"),
            "{kept:?}"
        );
        assert!(kept.contains(&"usr/share/app/icons/b.svg"), "{kept:?}");
        assert!(!kept.contains(&"usr/share/app/data/unused.dat"), "{kept:?}");
        assert_eq!(pruned.removed_trace, 3);
    }
}