Fimeg/SouveraineOS
Watch
1
0
Fork
You've already forked SouveraineOS
 0
Code Releases Activity

distribution: gate producers by declared artifacts

Browse source
This commit is contained in:
Fimeg 2026-08-13 13:53:30 -04:00
commit a3ff22531f
3 changed files with 60 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

53
tools/validate-distribution.py
View file

@ -18,6 +18,14 @@ def main() -> int:
parser = argparse.ArgumentParser(description=__doc__)
parser.add_argument("manifest", type=Path)
parser.add_argument("--ready", metavar="PROFILE", help="require one profile to be installer-ready")
parser.add_argument("--producer", metavar="NAME", help="validate artifacts emitted by one producer")
parser.add_argument(
"--artifact",
metavar="PACKAGE:ARCHITECTURE",
action="append",
default=[],
help="one package artifact emitted by --producer; repeat for every artifact",
)
args = parser.parse_args()
try:
with args.manifest.open("rb") as source:
@ -89,6 +97,49 @@ def main() -> int:
if target.get("state") == "supported" and profile.get("status") == "planned":
error(f"target {target_name}: supported target cannot use a planned profile")
if args.producer:
if args.producer not in producers:
error(f"unknown producer {args.producer!r}")
if not args.artifact:
error(f"producer {args.producer}: no artifacts declared")
emitted: set[tuple[str, str]] = set()
for artifact in args.artifact:
try:
package_name, architecture = artifact.rsplit(":", 1)
except ValueError:
error(f"invalid artifact {artifact!r}; expected PACKAGE:ARCHITECTURE")
continue
package = packages.get(package_name)
if package is None:
error(f"producer {args.producer}: undeclared artifact {artifact}")
continue
declared_producers = package.get("producers", [package.get("producer")])
if declared_producers != [args.producer]:
error(f"producer {args.producer}: does not own {package_name}")
if package.get("state") != "managed":
error(f"producer {args.producer}: {package_name} is {package.get('state')}, not managed")
if architecture not in package.get("architectures", []):
error(f"producer {args.producer}: {package_name} does not declare {architecture}")
if architecture not in producers.get(args.producer, {}).get("architectures", []):
error(f"producer {args.producer}: does not declare {architecture}")
emitted.add((package_name, architecture))
expected = {
(name, architecture)
for name, package in packages.items()
if package.get("state") == "managed"
and package.get("producer") == args.producer
for architecture in package.get("architectures", [])
}
if emitted != expected:
missing = sorted(expected - emitted)
unexpected = sorted(emitted - expected)
if missing:
error(f"producer {args.producer}: missing artifacts {missing}")
if unexpected:
error(f"producer {args.producer}: unexpected artifacts {unexpected}")
if errors:
print("distribution manifest is invalid:", file=sys.stderr)
print("\n".join(f" - {item}" for item in errors), file=sys.stderr)
@ -106,6 +157,8 @@ def main() -> int:
if profile.get("status") != "ready":
print(f"profile {args.ready} is not ready for a public installer", file=sys.stderr)
return 1
if args.producer:
print(f"producer contract valid: {args.producer}, {len(args.artifact)} artifacts")
return 0