pkgdb

type File ¶

type File struct {
	Path string
	// Algo is "md5", "sha1", "sha256" (or another name rpm uses); empty when the
	// database records no digest for the file.
	Algo   string
	Digest []byte
}

File is one file a package installed, with the digest the database records for it, if any.

type Format ¶

type Format string

Format names a package manager.

const (
	Dpkg Format = "dpkg"
	APK  Format = "apk"
	RPM  Format = "rpm"
)

type Index ¶

type Index struct {

	// DBs lists the databases that were read.
	DBs []string
	// Problems lists databases that exist but could not be read fully. A file
	// under such a database may have an owner this index does not know.
	Problems []string
	// contains filtered or unexported fields
}

Index maps absolute paths to the packages that own them, across every database found.

func Build(files map[string][]byte) *Index

func NewIndex(pkgs []Installed, dbs, problems []string) *Index

func (ix *Index) Empty() bool

func (ix *Index) Owners(p string) []Owner

func (ix *Index) OwnersOf(r *Resolver, p string) []Owner

func (ix *Index) Packages() []Installed

type Installed ¶

type Installed struct {
	Package Package
	Files   []File
}

Installed is a package and the files it owns.

type Owner ¶

type Owner struct {
	Package Package
	File    File
}

Owner is a package that lists a file, with the digest it recorded.

type Package ¶

type Package struct {
	Format Format `json:"format"`
	Name   string `json:"name"`
	// Version is the full version as the package manager writes it, with the
	// epoch if it has one: "1:8.2.35-1~deb12u1", "8.3.29-r0", "8.2.13-1.module+el9.4.0+20xxx".
	// For rpm it is EPOCH:VERSION-RELEASE (epoch omitted when zero).
	Version string `json:"version"`
	// Source is the source package it was built from: dpkg "Source:", apk origin,
	// rpm source rpm name without version. Equals Name when the database has none.
	Source string `json:"source"`
	// Vendor is rpm's Vendor tag, or dpkg's Maintainer. Empty for apk.
	Vendor string `json:"vendor,omitempty"`
	Arch   string `json:"arch,omitempty"`
	// DB is the database file the package was read from.
	DB string `json:"db"`
}

Package is one installed package.

type RPMRecord ¶

type RPMRecord struct {
	Key  uint32
	Blob []byte
}

RPMRecord is one row of an rpm sqlite database's Packages table: the package's instance number (hnum) and its header blob.

type RPMSQLiteReader ¶

type RPMSQLiteReader func(main, wal []byte) ([]RPMRecord, error)

RPMSQLiteReader returns every row of the Packages table of an rpm sqlite database (rpmdb.sqlite), applying the write-ahead log wal when non-nil. It must fail rather than return a partial table.

type Resolver ¶

type Resolver struct {
	// contains filtered or unexported fields
}

Resolver knows the symbolic and hard links of a scanned filesystem and maps a path to the other paths that name the same file, so a file found at /usr/bin/bash is matched with a package database that lists /bin/bash (merged /usr), and a hard-linked copy is matched with the name a package lists.

How to feed it, during the single walk over the filesystem or image tar:

• every symbolic link: AddSymlink(abs, target), where abs is the link's absolute path within the scanned root ("/bin", "/etc/os-release") and target is the link text exactly as stored ("usr/bin", "../usr/lib/os-release", "/usr/bin/php8.2"). Relative targets are relative to the link's directory; absolute targets are interpreted inside the scanned root (chroot semantics), never on the host;
• every tar hard link entry: AddHardlink(abs, target), with target the entry's Linkname made absolute ("usr/bin/php8.2" -> "/usr/bin/php8.2"). For a directory walk, pass files sharing (device, inode) the same way.

For an image, feed the flattened (whiteouts applied) view: a link removed by a later layer must not be added. Paths are cleaned; a link added twice keeps the last target. Resolution is bounded: at most maxLinkHops symlink expansions per lookup (Linux allows 40), so loops end with an error.

A Resolver may be read (Canonical, Resolve, Aliases) from several goroutines once it is fully fed; adding links concurrently with reads is not supported.

func NewResolver(symlinks map[string]string) *Resolver

func (r *Resolver) AddHardlink(abs, target string)

func (r *Resolver) AddSymlink(abs, target string)

func (r *Resolver) Aliases(p string) []string

func (r *Resolver) Canonical(p string) (string, error)

func (r *Resolver) Resolve(p string) (string, error)