verify

package

v0.11.0 Latest Latest Go to latest Published: Oct 11, 2026 License: Apache-2.0 Imports: 15 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/pyvvo/funcd

Links

Open Source Insights

Documentation ¶

Overview ¶

Package verify checks a platform backup generation off the box and pins it under gen/verified/ (ADR-0205 Decision 6): the parts against the manifest, a full decrypt with the operator's identities, the framing and key order, and with an escrow set the keys the generation names. The daemon holds no read credential and no identity.

Index ¶

type Options
type Result
- func Verify(ctx context.Context, o Options) (Result, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Options ¶

type Options struct {
	Bucket     blob.Bucket
	Identities []age.Identity
	EscrowDir  string
	Generation uint64
}

Options configure Verify. Bucket is the target opened with the verify credential (gocloud.OpenWith); Identities are envelope.ReadIdentities'; EscrowDir "" leaves the keys unchecked; Generation 0 is the newest complete ladder one.

type Result ¶

type Result struct {
	Generation  uint64
	Records     int64
	KeysChecked bool
	Pinned      bool
}

Result is a passed verification: Pinned is false when the gen/verified/ copy already existed, so nothing was written.

func Verify ¶

func Verify(ctx context.Context, o Options) (Result, error)

Verify checks one generation and pins it. Damage is fault.Invalid naming the store and part, and pins nothing; no such generation is fault.NotFound.

Source Files ¶

View all Source files

verify.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL