min
/
lanzaboote
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #155 from nix-community/desaster-control 

Avoid Unbootable System on Bootspec Changes
This commit is contained in:
Julian Stecklina 2023-04-23 15:29:18 +02:00 committed by GitHub
parent 385eced09d 4f182704e0
commit 9bf192bb79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

36
rust/tool/src/install.rs
View File

@ -4,7 +4,7 @@ use std::os::unix::prelude::PermissionsExt;
use std::path::{Path, PathBuf};
use std::process::Command;
use anyhow::{Context, Result};
use anyhow::{anyhow, Context, Result};
use nix::unistd::sync;
use tempfile::TempDir;
@ -163,24 +163,31 @@ impl Installer {
where
F: FnMut(&mut Self, &Generation, &mut GenerationArtifacts) -> Result<()>,
{
for link in links {
let generation_result = Generation::from_link(link)
.with_context(|| format!("Failed to build generation from link: {link:?}"));
let generations = links
.iter()
.filter_map(|link| {
let generation_result = Generation::from_link(link)
.with_context(|| format!("Failed to build generation from link: {link:?}"));
// Ignore failing to read a generation so that old malformed generations do not stop
// lzbt from working.
let generation = match generation_result {
Ok(generation) => generation,
Err(e) => {
log::debug!(
"Ignoring generation {} because it's malformed.",
// Ignore failing to read a generation so that old malformed generations do not stop
// lzbt from working.
if let Err(e) = &generation_result {
log::warn!(
"Ignoring generation {} because it's malformed: {e:#}",
link.version
);
log::debug!("{e:#}");
continue;
}
};
generation_result.ok()
})
.collect::<Vec<Generation>>();
if generations.is_empty() {
// We can't continue, because we would remove all boot entries, if we did.
return Err(anyhow!("No bootable generations found! Aborting to avoid unbootable system. Please check for Lanzaboote updates!"));
}
for generation in generations {
build_generation_artifacts(self, &generation, generation_artifacts)
.context("Failed to build generation artifacts.")?;
@ -191,6 +198,7 @@ impl Installer {
.context("Failed to build generation artifacts for specialisation.")?;
}
}
Ok(())
}