Struct SetResolver

pub(crate) struct SetResolver<'a> {
    manifest: &'a Manifest,
    repo: Option<Repository>,
    names: HashMap<Root, Tag>,
    roots: HashMap<Either<Tag, SetMirror>, Root>,
    tasks: JoinSet<Result<(Option<Box<dyn Transport + Send>>, <Vec<UnpackedRef<ObjectId, Root>> as IntoIterator>::IntoIter, Root, Tag, Url), Box<dyn Error + Send + Sync>>>,
    atoms: HashMap<AtomId<Root>, HashMap<Version, ResolvedAtom<ObjectId, Root>>>,
    sets: BTreeMap<GitDigest, SetDetails>,
    transports: HashMap<Url, Box<dyn Transport + Send>>,
    ekala: EkalaManager,
}

Fields

manifest: &'a Manifest

repo: Option<Repository>

names: HashMap<Root, Tag>

roots: HashMap<Either<Tag, SetMirror>, Root>

tasks: JoinSet<Result<(Option<Box<dyn Transport + Send>>, <Vec<UnpackedRef<ObjectId, Root>> as IntoIterator>::IntoIter, Root, Tag, Url), Box<dyn Error + Send + Sync>>>

atoms: HashMap<AtomId<Root>, HashMap<Version, ResolvedAtom<ObjectId, Root>>>

sets: BTreeMap<GitDigest, SetDetails>

transports: HashMap<Url, Box<dyn Transport + Send>>

ekala: EkalaManager

Implementations

impl<'a> SetResolver<'a>

pub(crate) fn new( repo: Option<&ThreadSafeRepository>, manifest: &'a Manifest, ) -> Result<Self, AtomError>

Creates a new SetResolver to validate the package sets in a manifest.

pub(crate) async fn get_and_check_sets( self, ) -> Result<ResolvedSets, Box<dyn Error + Send + Sync>>

Verifies the integrity of declared package sets and collects atom references.

This function consumes the resolver and performs several critical checks to ensure the consistency and integrity of the package sets defined in the manifest:

1. Root Consistency: It ensures that every URL within a named mirror set points to the same underlying repository by verifying their advertised root hashes.
2. Set Uniqueness: It guarantees that a given repository URL does not belong to more than one mirror set, preventing ambiguity.
3. Version and Revision Coherency: It aggregates all atoms from each mirror, ensuring that no two mirrors advertise the same atom version with a different Git revision, which could indicate tampering or misconfiguration.

Returns

A Result containing a ResolvedSets struct on success, which holds the aggregated results of the validation process.

Errors

Returns a BoxError if any of the following conditions are met:

• A repository is found in more than one mirror set.
• The mirrors for a given set do not all point to the same root hash.
• An atom is advertised with the same version but different revisions across mirrors.

fn process_mirror( &mut self, set_tag: &'a Tag, mirror: &'a SetMirror, ) -> Result<(), Box<dyn Error + Send + Sync>>

Processes a single mirror, either local or remote, and initiates consistency checks.

For local mirrors, it calculates the root hash directly. For remote mirrors, it spawns an asynchronous task to fetch repository data and perform checks.

fn update_sets(&mut self, name: &Tag, root: Root, set: SetMirror)

fn process_remote_mirror_result( &mut self, result: Result<(Option<Box<dyn Transport + Send>>, <Vec<UnpackedRef<ObjectId, Root>> as IntoIterator>::IntoIter, Root, Tag, Url), Box<dyn Error + Send + Sync>>, ) -> Result<(), Box<dyn Error + Send + Sync>>

Handles the result of an asynchronous remote mirror check.

This function processes the data fetched from a remote mirror, performs consistency checks, and aggregates the results into the provided hashmaps.

fn check_and_insert_atom( &mut self, atom: UnpackedRef<ObjectId, Root>, size: usize, mirror_url: &Url, ) -> Result<(), Box<dyn Error + Send + Sync>>

Verifies the consistency of a single atom against the existing set of resolved atoms.

This check ensures that if an atom is advertised by multiple mirrors, it always has the same revision for the same version.

fn check_set_consistency( &mut self, set_tag: &Tag, root: Root, mirror: &SetMirror, ) -> Result<(), Box<dyn Error + Send + Sync>>

Ensures that a given package set is consistent across all its mirrors.

This check verifies two conditions:

1. A repository root hash is not associated with more than one package set name.
2. A package set name is not associated with more than one repository root hash.