coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Bind isolated restore to fetched artifact and document archive integrity gates
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a06ecb-456a-71c2-b41e-0755d336e883
This commit is contained in:
codex 2026-09-05 22:21:54 +02:00
parent 0cca68da96
commit 480d181549
4 changed files with 41 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/capture_forgejo_archive.py
View file

@ -11,6 +11,8 @@ import zipfile
def validate_archive(path):
with zipfile.ZipFile(path) as archive:
if sum(i.file_size for i in archive.infolist()) > 20*1024**3:
raise ValueError('archive exceeds recovery size bound')
names = set(archive.namelist())
if 'forgejo-db.sql' not in names or not any(n.startswith('repos/') for n in names):
raise ValueError('required archive content missing')
@ -48,7 +50,8 @@ def capture(namespace, pod, destination):
piece = call(['dd','if='+remote+'.zip','bs='+str(chunk),'skip='+str(index),'count=1'])
if len(piece) != min(chunk,size-index*chunk): raise ValueError('short archive chunk')
out.write(piece)
actual = hashlib.file_digest(destination.open('rb'),'sha256').hexdigest()
with destination.open('rb') as source:
actual = hashlib.file_digest(source,'sha256').hexdigest()
if actual != expected: raise ValueError('archive transfer mismatch')
validate_archive(destination)
finally: