assertstate

Documentation

Overview

Package assertstate implements the manager and state aspects responsible for the enforcement of assertions in the system and manages the system-wide assertion database.

Index

• func Add(s *state.State, a asserts.Assertion) error
• func AddBatch(s *state.State, batch *asserts.Batch, opts *asserts.CommitOptions) error
• func AutoAliases(s *state.State, info *snap.Info) (map[string]string, error)
• func AutoRefreshAssertions(s *state.State, userID int) error
• func BaseDeclaration(s *state.State) (*asserts.BaseDeclaration, error)
• func DB(s *state.State) asserts.RODatabase
• func DeleteValidationSet(st *state.State, accountID, name string)
• func GetValidationSet(st *state.State, accountID, name string, tr *ValidationSetTracking) error
• func Publisher(s *state.State, snapID string) (*asserts.Account, error)
• func RefreshSnapDeclarations(s *state.State, userID int) error
• func ReplaceDB(state *state.State, db *asserts.Database)
• func SnapDeclaration(s *state.State, snapID string) (*asserts.SnapDeclaration, error)
• func Store(s *state.State, store string) (*asserts.Store, error)
• func UpdateValidationSet(st *state.State, tr *ValidationSetTracking)
• func ValidateRefreshes(s *state.State, snapInfos []*snap.Info, ignoreValidation map[string]bool, ...) (validated []*snap.Info, err error)
• func ValidationSetKey(accountID, name string) string
• func ValidationSets(st *state.State) (map[string]*ValidationSetTracking, error)
• type AssertManager
  • func Manager(s *state.State, runner *state.TaskRunner) (*AssertManager, error)
  • func (m *AssertManager) Ensure() error
• type ValidationSetMode
• type ValidationSetTracking

Functions

func Add

func Add(s *state.State, a asserts.Assertion) error

Add the given assertion to the system assertion database.

func AddBatch

func AddBatch(s *state.State, batch *asserts.Batch, opts *asserts.CommitOptions) error

AddBatch adds the given assertion batch to the system assertion database.

func AutoAliases

func AutoAliases(s *state.State, info *snap.Info) (map[string]string, error)

AutoAliases returns the explicit automatic aliases alias=>app mapping for the given installed snap.

func AutoRefreshAssertions

func AutoRefreshAssertions(s *state.State, userID int) error

AutoRefreshAssertions tries to refresh all assertions

func BaseDeclaration

func BaseDeclaration(s *state.State) (*asserts.BaseDeclaration, error)

BaseDeclaration returns the base-declaration assertion with policies governing all snaps.

func DB

func DB(s *state.State) asserts.RODatabase

DB returns a read-only view of system assertion database.

func DeleteValidationSet

func DeleteValidationSet(st *state.State, accountID, name string)

DeleteValidationSet deletes a validation set for the given accoundID and name. It is not an error to delete a non-existing one.

func GetValidationSet

func GetValidationSet(st *state.State, accountID, name string, tr *ValidationSetTracking) error

GetValidationSet retrieves the ValidationSetTracking for the given account and name.

func Publisher

func Publisher(s *state.State, snapID string) (*asserts.Account, error)

Publisher returns the account assertion for publisher of the given snap-id if it is present in the system assertion database.

func RefreshSnapDeclarations

func RefreshSnapDeclarations(s *state.State, userID int) error

RefreshSnapDeclarations refetches all the current snap declarations and their prerequisites.

func ReplaceDB

func ReplaceDB(state *state.State, db *asserts.Database)

ReplaceDB replaces the assertion database used by the manager.

func SnapDeclaration

func SnapDeclaration(s *state.State, snapID string) (*asserts.SnapDeclaration, error)

SnapDeclaration returns the snap-declaration for the given snap-id if it is present in the system assertion database.

func Store

func Store(s *state.State, store string) (*asserts.Store, error)

Store returns the store assertion with the given name/id if it is present in the system assertion database.

func UpdateValidationSet

func UpdateValidationSet(st *state.State, tr *ValidationSetTracking)

UpdateValidationSet updates ValidationSetTracking. The method assumes valid tr fields.

func ValidateRefreshes

func ValidateRefreshes(s *state.State, snapInfos []*snap.Info, ignoreValidation map[string]bool, userID int, deviceCtx snapstate.DeviceContext) (validated []*snap.Info, err error)

ValidateRefreshes validates the refresh candidate revisions represented by the snapInfos, looking for the needed refresh control validation assertions, it returns a validated subset in validated and a summary error if not all candidates validated. ignoreValidation is a set of snap-instance-names that should not be gated.

func ValidationSetKey

func ValidationSetKey(accountID, name string) string

ValidationSetKey formats the given account id and name into a validation set key.

func ValidationSets

func ValidationSets(st *state.State) (map[string]*ValidationSetTracking, error)

ValidationSets retrieves all ValidationSetTracking data.

Types

type AssertManager

type AssertManager struct{}

AssertManager is responsible for the enforcement of assertions in system states. It manipulates the observed system state to ensure nothing in it violates existing assertions, or misses required ones.

func Manager

func Manager(s *state.State, runner *state.TaskRunner) (*AssertManager, error)

Manager returns a new assertion manager.

func (*AssertManager) Ensure

func (m *AssertManager) Ensure() error

Ensure implements StateManager.Ensure.

type ValidationSetMode

type ValidationSetMode int

ValidationSetMode reflects the mode of respective validation set, which is either monitoring or enforcing.

const (
	Monitor ValidationSetMode = iota
	Enforce
)

type ValidationSetTracking

type ValidationSetTracking struct {
	AccountID string            `json:"account-id"`
	Name      string            `json:"name"`
	Mode      ValidationSetMode `json:"mode"`

	// PinnedAt is an optional pinned sequence point, or 0 if not pinned.
	PinnedAt int `json:"pinned-at,omitempty"`

	// Current is the current sequence point.
	Current int `json:"current,omitempty"`
}

ValidationSetTracking holds tracking parameters for associated validation set.