SILVER/NODEDC_DEVICE_CORE
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix(deploy): pin VPS telemetry predecessor hash

Browse Source
This commit is contained in:
DCCONSTRUCTIONS
2026-08-22 17:48:03 +03:00
parent 23ea96fbb2
commit d12b172569
4 changed files with 23 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
deployment/device-edge-vps-host-telemetry-v1.json
+1 -1
View File
@@ -7,7 +7,7 @@
"phase": "host-telemetry",
"runtimeHost": "koffyvngij",
"predecessorPatch": "device-edge-vps-command-transport-20260812-013",
"predecessorArtifactSha256": "c7486ec879681ddd706f229628c8556ca8c9ccc4f152a85debb409c302759ef",
"predecessorArtifactSha256": "c7486ec879681ddd706f229b628c8556ca8c9ccc4f152a85debb409c302759ef",
"agent": "telegraf",
"agentVersion": "1.38.4",
"agentRuntimeUser": "nodedc-telemetry",
infra/deploy-runner/build-device-edge-vps-artifact.mjs
+3
View File
@@ -442,6 +442,9 @@ async function assertBoundary() {
}
}
if (phase === "host-telemetry") {
if (!/^[0-9a-f]{64}$/.test(descriptor.predecessorArtifactSha256 || "")) {
throw new Error("host_telemetry_predecessor_sha256_invalid");
}
for (const required of [
'"predecessorPatch": "device-edge-vps-command-transport-20260812-013"',
'"agent": "telegraf"',
infra/deploy-runner/nodedc-b2-vps-deploy
+2 -2
View File
@@ -135,7 +135,7 @@ COMMAND_TRANSPORT_ACCEPTED_PATCH = (
"device-edge-vps-command-transport-20260812-013"
)
COMMAND_TRANSPORT_ACCEPTED_SHA256 = (
"c7486ec879681ddd706f229628c8556ca8c9ccc4f152a85debb409c302759ef"
"c7486ec879681ddd706f229b628c8556ca8c9ccc4f152a85debb409c302759ef"
)
FOUNDATION_ENTRIES = (
@@ -351,7 +351,7 @@ PHASE_FILE_SHA256 = {
},
"host-telemetry": {
"deployment/device-edge-vps-host-telemetry-v1.json":
"69d4ed7c7462d982e53fa2f0688d7a129952811b96dcb1bf4ae3721f235fc406",
"c4dc60e68549c3c3844779091d5b767a2cb4152cd923433b488cb56e37717391",
"packages/device-edge-channel-contract/package.json":
"57d5349b5dcef2cacd4f3e4fad010359a65d59f5f903eff07d89f67c497f97c0",
"packages/device-edge-channel-contract/src/index.mjs":
infra/deploy-runner/test_device_edge_vps_artifact.py
+17
View File
@@ -462,6 +462,23 @@ class DeviceEdgeVpsArtifactTest(unittest.TestCase):
self.assertIn("command_transport=typed-service-ping-v1", rendered)
self.assertIn("gelios=untouched-legacy-only", rendered)
def test_host_telemetry_predecessor_is_exact_command_transport_artifact(self):
source_root = SCRIPT_DIR.parents[1]
descriptor = json.loads(
(
source_root
/ "deployment/device-edge-vps-host-telemetry-v1.json"
).read_text(encoding="utf-8")
)
predecessor_sha = descriptor["predecessorArtifactSha256"]
self.assertRegex(predecessor_sha, r"^[0-9a-f]{64}$")
self.assertEqual(predecessor_sha, RUNNER.COMMAND_TRANSPORT_ACCEPTED_SHA256)
self.assertEqual(
predecessor_sha,
"c7486ec879681ddd706f229b628c8556ca8c9ccc4f152a85debb409c302759ef",
)
def test_publish_payload_preserves_unselected_executable_modes(self):
with tempfile.TemporaryDirectory(prefix="nodedc-vps-publish-scope-") as directory:
root = Path(directory)