e28783e563
The package pool was committed but the installer still stopped at "no local package repository": it requires the compiled bundle (Packages, Packages.gz, packages.lock.tsv, SHA256SUMS), and building that had never run. The bundle - 1321 packages, 884 MiB, Ubuntu 26.04 amd64, built with apt-ftparchive on the fleet's own release so the closure matches the devices. - built/pool/ is gitignored: those .deb files are already tracked once under provisioning/offline-repo/packages/, and the same ~890 MB does not need a second path. What the installer reads from the bundle is the index. - The output directory is chmod 0755: mktemp -d created it 0700 and left it so, which made a valid bundle unreadable to the installer's probe. dpkg-deb output was parsed wrong in four places - `dpkg-deb -f <file> Package Version` prints "<Field>: <value>", and the callers kept the whole line, so the value carried its label. build-index.sh therefore accepted no package at all and reported an empty pool; add-packages.sh rejected every real .deb as an invalid name, missed version conflicts, and copied a duplicate; build-offline-repo.sh never matched a pin. - The test suite could not see any of this: its dpkg-deb stub emitted bare values. The stub now prints the labels exactly as the real tool does, which is what surfaced the remaining three sites. Tests - The secret scan covers the files we author, not apt-ftparchive's index over third-party packages: polkit's own description reads "...asked for their password:", which is prose in the packages, not a leak. Any secret reaching a manifest, README or tool is still caught. - The "test build must not touch the bundle" assertion now compares the directory before and after instead of demanding it be empty, so a maintainer's real build is not reported as test spill.
4.9 KiB
4.9 KiB
| 1 | # Manifest audit table - the contract behind manifests/*.txt |
|---|---|
| 2 | # |
| 3 | # Four TAB-separated columns, one row per required package: |
| 4 | # manifest <TAB> package <TAB> required-by <TAB> why |
| 5 | # |
| 6 | # build-offline-repo.sh --dry-run-plan fails on drift in either direction: |
| 7 | # * a row whose package is not pinned in that manifest -> MISSING PACKAGES |
| 8 | # * a pin in a manifest with no row here -> PLAN ERROR (rogue pin) |
| 9 | # |
| 10 | # scripts/install/blueforce-install.sh never reads this file: it is the audit |
| 11 | # trail for humans and for the dry-run plan. Kernel modules and other artifacts |
| 12 | # that are not shipped as .deb files are out of scope. |