oversu/VulpesOS
oversu/VulpesOS
Watch
3
2
Fork
You've already forked VulpesOS
 0
Code Issues 27 Pull requests Projects Releases 9 Packages Wiki Activity

Prepare verified Sargo packages and independent boot recovery

Browse source
This commit is contained in:
OverSu 2026-10-03 22:33:47 +02:00
commit 978542bc87
14 changed files with 665 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

11
tundra/tools/test-sargo-boot.py
View file

@ -17,7 +17,8 @@ from tundra import ROOT, digest, now, save
from usb_protocol import exchange, device_layout
def checked_plan():
def checked_backup_plan():
"""Recovery only needs the qualified backup, not a working diagnostic."""
path = ROOT/'logs/device/boot-backup-qualification.json'
validation = json.loads((ROOT/'VALIDATION.json').read_text())
if validation.get('bootBackup', {}).get('reportSha256') != digest(path):
@ -27,6 +28,14 @@ def checked_plan():
verify(backup)
if digest(backup/'manifest.json') != plan['backupManifestSha256']:
raise ValueError('Backup manifest changed; requalify')
if (plan.get('device') != 'sargo' or plan.get('activeSlot') != 'a'
or not re.fullmatch(r'[0-9a-f]{64}', plan.get('serialSha256', ''))):
raise ValueError('Backup qualification must identify a Sargo on slot A')
return plan
def checked_plan():
plan = checked_backup_plan()
image = ROOT/plan['diagnosticImage']
if digest(image) != plan['diagnosticImageSha256'] or digest(image.parent/'build.json') != plan['diagnosticBuildSha256']:
raise ValueError('Diagnostic image/build changed; requalify')