52 lines
2.4 KiB
JavaScript
52 lines
2.4 KiB
JavaScript
#!/usr/bin/env node
|
|
|
|
import { createHash } from 'node:crypto'
|
|
import { readFile, writeFile } from 'node:fs/promises'
|
|
import { resolve } from 'node:path'
|
|
import { fileURLToPath } from 'node:url'
|
|
import { canonicalJson } from '../lib/canonical-json.mjs'
|
|
import { parseBootstrapManifest, parseEnvironmentManifest, parseOfficialDshPolicy } from '../lib/contracts.mjs'
|
|
|
|
function sha256(value) {
|
|
return createHash('sha256').update(value).digest('hex')
|
|
}
|
|
|
|
function releaseManifest(document) {
|
|
const normalized = structuredClone(document)
|
|
delete normalized.issuedAt
|
|
delete normalized.keyringGeneration
|
|
delete normalized.targetSequence
|
|
for (const artifact of normalized.artifacts) delete artifact.url
|
|
return normalized
|
|
}
|
|
|
|
export async function createEnvironmentRelease({ bootstrapManifestPath, environmentManifestPath, officialDshPolicyPath }) {
|
|
const bootstrapBytes = await readFile(resolve(bootstrapManifestPath))
|
|
const environmentBytes = await readFile(resolve(environmentManifestPath))
|
|
const policy = parseOfficialDshPolicy(JSON.parse(await readFile(resolve(officialDshPolicyPath), 'utf8')))
|
|
const bootstrap = parseBootstrapManifest(bootstrapBytes)
|
|
const environment = parseEnvironmentManifest(environmentBytes)
|
|
const bootstrapDocument = JSON.parse(bootstrapBytes)
|
|
const environmentDocument = JSON.parse(environmentBytes)
|
|
|
|
return Object.freeze({
|
|
schema: 1,
|
|
version: environment.version,
|
|
bootstrapVersion: bootstrap.version,
|
|
bootstrapContentSha256: sha256(canonicalJson(releaseManifest(bootstrapDocument))),
|
|
environmentContentSha256: sha256(canonicalJson(releaseManifest(environmentDocument))),
|
|
officialDshPolicySha256: sha256(canonicalJson(policy)),
|
|
})
|
|
}
|
|
|
|
const invoked = process.argv[1] !== undefined && resolve(process.argv[1]) === fileURLToPath(import.meta.url)
|
|
if (invoked) {
|
|
const [bootstrapManifestPath, environmentManifestPath, officialDshPolicyPath, outputPath] = process.argv.slice(2)
|
|
if ([bootstrapManifestPath, environmentManifestPath, officialDshPolicyPath, outputPath].includes(undefined)) {
|
|
console.error('usage: environment-release.mjs <bootstrap.manifest.json> <environment.manifest.json> <official-dsh-policy.json> <output.json>')
|
|
process.exit(64)
|
|
}
|
|
const release = await createEnvironmentRelease({ bootstrapManifestPath, environmentManifestPath, officialDshPolicyPath })
|
|
await writeFile(resolve(outputPath), canonicalJson(release), { flag: 'wx' })
|
|
}
|