Skip to main content

verify_and_extract_box

Function verify_and_extract_box 

Source
pub fn verify_and_extract_box(
    release_document_path: &Path,
    options: &PrepareOptions<'_>,
) -> Result<PreparedBox>
Expand description

Verifies and extracts one local box without executing any code from it.

The destination must not exist. Extraction happens in a fresh sibling directory so the final rename stays on one filesystem and exposes either the complete verified tree or nothing at all — a box is never observed half-installed.

§Errors

When the destination exists, the trust chain fails, the extracted size disagrees with the signed release, or the archive changed while it was being read.