Documentation
¶
Overview ¶
Package runtimeprofile connects each StackKits entry point to the shared self-hosted data-profile policy. Locality policy remains in go-common.
Index ¶
- func AdmitSpec(value string) error
- func BeginRILAuthorityApply() (func(), error)
- func Boot() error
- func FullLocal() bool
- func InvalidateRILAuthority() error
- func PublishRILAuthority(workspace, planHash, resultHash, expiresAt string, paths []string, ...) error
- func RILCanonicalWorkspace(workspace string) bool
- func RILWorkspaceConfigured() bool
- func ReadRILEvidence(workspace, name string) ([]byte, error)
- func ValidateLocalDNS(servers []string) error
- type DataProfile
- type LocalNetwork
- type OfflineBundleRef
- type RILEvidence
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AdmitSpec ¶
AdmitSpec binds native lifecycle admission to the persisted selection. It never repairs a mismatch by changing the environment or rewriting intent.
func BeginRILAuthorityApply ¶
func BeginRILAuthorityApply() (func(), error)
BeginRILAuthorityApply serializes activation against active hosted dials. Acquire before any workspace or output lock; retain it through Apply and authority publication. Invalidation happens after plan verification.
func Boot ¶
func Boot() error
Boot validates the edition/profile before any runtime work and installs the shared HTTP/DNS guard. Custom transports and subprocesses retain their own admitted local destinations; this does not claim an operating-system firewall.
func FullLocal ¶
func FullLocal() bool
FullLocal is queried only after Boot has validated the process environment.
func InvalidateRILAuthority ¶
func InvalidateRILAuthority() error
InvalidateRILAuthority runs before Product Apply. A failed or interrupted apply cannot leave the preceding hosted-profile grant usable. A system without the privileged Guard has no RIL authority to invalidate.
func PublishRILAuthority ¶
func RILCanonicalWorkspace ¶
Only the executor's canonical workspace can publish the host authority. Admitted descendants still invalidate the previous authority before Apply.
func RILWorkspaceConfigured ¶
func RILWorkspaceConfigured() bool
RILWorkspaceConfigured is set only by the privileged Guard executor.
func ReadRILEvidence ¶
ReadRILEvidence accepts only root-owned, non-writable directory chains and single-link regular files; it never follows a symlink. This is also used for the evidence recheck immediately before publishing the root assertion.
func ValidateLocalDNS ¶
Types ¶
type DataProfile ¶
type DataProfile string
DataProfile is the persisted StackSpec selection carried by a verified plan. Its zero value is the backward-compatible Standard profile.
const ( StandardProfile DataProfile = "standard" FullLocalProfile DataProfile = dataprofile.FullLocal )
func FromBootEnv ¶
func FromBootEnv() (DataProfile, error)
FromBootEnv validates the shared edition/profile policy for initial authoring.
func Parse ¶
func Parse(value string) (DataProfile, error)
Parse accepts canonical intent only; an absent field retains Standard.
func (DataProfile) FullLocal ¶
func (p DataProfile) FullLocal() bool
type LocalNetwork ¶
type LocalNetwork struct {
StackID string `json:"stackId"`
Resolver string `json:"resolver"`
Upstream []string `json:"upstream"`
}
LocalNetwork is compiler-owned cohort identity and DNS transport. The resolver is the attested node's signed LAN DNS service, not a host default.
func (LocalNetwork) Validate ¶
func (p LocalNetwork) Validate() error
type OfflineBundleRef ¶
type OfflineBundleRef struct {
Path string `json:"path" yaml:"path"`
ManifestSHA256 string `json:"manifestSha256" yaml:"manifestSha256"`
}
OfflineBundleRef identifies immutable installation input. This reference never replaces release attestation or verification of the complete bundle.
func (OfflineBundleRef) Validate ¶
func (r OfflineBundleRef) Validate() error
Validate checks the portable Linux mount reference, without reading files or implying trust. Restricting characters keeps Compose interpolation literal.
type RILEvidence ¶
RILEvidence binds exact bytes that have already passed product verification.
Source Files