Expand description
The GL build a sysroot names for hosts that have none.
A sysroot may carry etc/onelf/platform.toml:
label = "platform-1"
[gl]
url = "https://example.com/platform-1/gl.onelf"
blake3 = "<64 hex characters>"A package built on the sysroot pins those three values, so the publisher who built on the sysroot is the trust root and nothing has to be signed.
Structs§
- Pin
- A GL build pinned by hash.
Constants§
- PLATFORM_
FILE - Where the pin sits under a sysroot root.
Functions§
- check_
hash - A BLAKE3 hash is 64 hex characters, nothing else.
- check_
label - A label names the build’s directory in the runtime’s store, so it is a plain directory name: not empty, no slash, no leading dot.
- check_
url - A build is executable code, so it comes over TLS or from a local file, never plain HTTP.
- parse
- Parse the file’s text. Public so a recipe override can be validated with the same rules.
- read
- The pin the sysroot at
rootnames, orNonewhen it names none.