Documentation
¶
Overview ¶
Package helperdist resolves the signed fleetbox-helper binary the darwin client drives: it returns a locally pre-staged helper named by the FLEETBOX_HELPER environment variable, or downloads the checksum-pinned helper for this platform into ~/.fleetbox/bin, strips its Gatekeeper quarantine, and makes it executable.
It mirrors how the Linux backend already fetches cloud-hypervisor (ADR-0011): the helper is delivered at first use, cached and verified, not embedded in the module. The download is version-stamped so a client always runs the exact helper its protocol matches, and an empty catalog checksum is rejected — a binary that runs with the virtualization entitlement must never be used unverified (ADR-0017, R5). The FLEETBOX_HELPER override serves both the offline/air-gapped escape hatch and the dev bootstrap (the Makefile points it at the locally built, ad-hoc-signed helper).
Index ¶
Constants ¶
const EnvHelper = "FLEETBOX_HELPER"
EnvHelper names a pre-staged helper binary to use instead of downloading. It bypasses the catalog and the checksum pin, so the bind handshake's protocol check is what guards against pointing it at a stale build (ADR-0017, R5).
Variables ¶
This section is empty.
Functions ¶
Types ¶
This section is empty.