mirror of
https://github.com/openwrt/openwrt.git
synced 2024-12-22 15:02:32 +00:00
8822a8d850
Introduce `sha256_unsigned` which is a checksum of the image _before_ a signature is attached. This is helpful to compare image reproducibility. Since the `.sha256sum` file is located in the $(KDIR) folder, switch $(BIN_DIR) with $(KDIR) to simplify the code. The value of $(BIN_DIR) itself is not stored inside the resulting JSON file, so it can be replaced. Signed-off-by: Paul Spooren <mail@aparcar.org>
79 lines
2.1 KiB
Python
Executable File
79 lines
2.1 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
from os import getenv
|
|
from pathlib import Path
|
|
from sys import argv
|
|
import hashlib
|
|
import json
|
|
|
|
if len(argv) != 2:
|
|
print("ERROR: JSON info script requires output arg")
|
|
exit(1)
|
|
|
|
json_path = Path(argv[1])
|
|
file_path = Path(getenv("FILE_DIR")) / getenv("FILE_NAME")
|
|
|
|
|
|
if not file_path.is_file():
|
|
print("Skip JSON creation for non existing file", file_path)
|
|
exit(0)
|
|
|
|
|
|
def get_titles():
|
|
titles = []
|
|
for prefix in ["", "ALT0_", "ALT1_", "ALT2_"]:
|
|
title = {}
|
|
for var in ["vendor", "model", "variant"]:
|
|
if getenv("DEVICE_{}{}".format(prefix, var.upper())):
|
|
title[var] = getenv("DEVICE_{}{}".format(prefix, var.upper()))
|
|
|
|
if title:
|
|
titles.append(title)
|
|
|
|
if not titles:
|
|
titles.append({"title": getenv("DEVICE_TITLE")})
|
|
|
|
return titles
|
|
|
|
|
|
device_id = getenv("DEVICE_ID")
|
|
hash_file = hashlib.sha256(file_path.read_bytes()).hexdigest()
|
|
|
|
if file_path.with_suffix(file_path.suffix + ".sha256sum").exists():
|
|
hash_unsigned = (
|
|
file_path.with_suffix(file_path.suffix + ".sha256sum").read_text().strip()
|
|
)
|
|
else:
|
|
hash_unsigned = hash_file
|
|
|
|
file_info = {
|
|
"metadata_version": 1,
|
|
"target": "{}/{}".format(getenv("TARGET"), getenv("SUBTARGET")),
|
|
"version_code": getenv("VERSION_CODE"),
|
|
"version_number": getenv("VERSION_NUMBER"),
|
|
"source_date_epoch": int(getenv("SOURCE_DATE_EPOCH")),
|
|
"profiles": {
|
|
device_id: {
|
|
"image_prefix": getenv("DEVICE_IMG_PREFIX"),
|
|
"images": [
|
|
{
|
|
"type": getenv("FILE_TYPE"),
|
|
"name": getenv("FILE_NAME"),
|
|
"sha256": hash_file,
|
|
"sha256_unsigned": hash_unsigned,
|
|
}
|
|
],
|
|
"device_packages": getenv("DEVICE_PACKAGES").split(),
|
|
"supported_devices": getenv("SUPPORTED_DEVICES").split(),
|
|
"titles": get_titles(),
|
|
}
|
|
},
|
|
}
|
|
|
|
if getenv("FILE_FILESYSTEM"):
|
|
file_info["profiles"][device_id]["images"][0]["filesystem"] = getenv(
|
|
"FILE_FILESYSTEM"
|
|
)
|
|
|
|
json_path.write_text(json.dumps(file_info, separators=(",", ":")))
|