| 1 | package main |
| 2 | |
| 3 | import ( |
| 4 | "archive/tar" |
| 5 | "bytes" |
| 6 | "compress/gzip" |
| 7 | "errors" |
| 8 | "fmt" |
| 9 | "io" |
| 10 | "os" |
| 11 | "path/filepath" |
| 12 | "strings" |
| 13 | |
| 14 | "reasonix/internal/installlayout" |
| 15 | ) |
| 16 | |
| 17 | // stageLinuxShellRelease expands only the signed release unit. The bounded |
| 18 | // extraction rejects aliases, links and duplicate paths before activation; |
| 19 | // executable permissions survive, while setuid/setgid never enter a user tree. |
| 20 | func stageLinuxShellRelease(archive []byte, staging string) ([]installlayout.Member, []string, error) { |
| 21 | root, err := os.OpenRoot(staging) |
| 22 | if err != nil { |
| 23 | return nil, nil, err |
| 24 | } |
| 25 | defer root.Close() |
| 26 | gz, err := gzip.NewReader(bytes.NewReader(archive)) |
| 27 | if err != nil { |
| 28 | return nil, nil, err |
| 29 | } |
| 30 | defer gz.Close() |
| 31 | tr := tar.NewReader(gz) |
| 32 | seen := map[string]bool{} |
| 33 | var expanded int64 |
| 34 | for { |
| 35 | h, err := tr.Next() |
| 36 | if errors.Is(err, io.EOF) { |
| 37 | break |
| 38 | } |
| 39 | if err != nil { |
| 40 | return nil, nil, err |
| 41 | } |
| 42 | name := strings.TrimPrefix(h.Name, "./") |
| 43 | if h.Typeflag == tar.TypeDir { |
| 44 | name = strings.TrimSuffix(name, "/") |
| 45 | if name == "app" { |
| 46 | continue |
| 47 | } |
| 48 | if err := installlayout.ValidateMemberName(name); err != nil || !strings.HasPrefix(name, "app/") { |
| 49 | return nil, nil, fmt.Errorf("invalid release directory %q", h.Name) |
| 50 | } |
| 51 | continue |
| 52 | } |
| 53 | if err := installlayout.ValidateMemberName(name); err != nil { |
| 54 | return nil, nil, err |
| 55 | } |
| 56 | switch name { |
| 57 | case "reasonix-desktop", "reasonix", "reasonix-launcher", "reasonix-guard": |
| 58 | default: |
| 59 | if !strings.HasPrefix(name, "app/") { |
| 60 | return nil, nil, fmt.Errorf("unexpected release member %q", name) |
| 61 | } |
| 62 | } |
| 63 | if h.Typeflag != tar.TypeReg || h.Size < 0 || seen[name] { |
| 64 | return nil, nil, fmt.Errorf("invalid or duplicate release member %q", name) |
| 65 | } |
| 66 | if h.Size > (2<<30)-expanded || len(seen) >= 10000 { |
| 67 | return nil, nil, fmt.Errorf("release tree exceeds extraction limit") |
| 68 | } |
| 69 | expanded += h.Size |
| 70 | seen[name] = true |
| 71 | // Resolve relative to the opened directory handle. Name validation |
| 72 | // enforces the release layout; Root also prevents an existing or |
| 73 | // concurrently replaced parent symlink from escaping staging. |
| 74 | dst := filepath.FromSlash(name) |
| 75 | if err := root.MkdirAll(filepath.Dir(dst), 0755); err != nil { |
| 76 | return nil, nil, err |
| 77 | } |
| 78 | mode := os.FileMode(h.Mode) & 0755 |
| 79 | file, err := root.OpenFile(dst, os.O_WRONLY|os.O_CREATE|os.O_EXCL, mode) |
| 80 | if err != nil { |
| 81 | return nil, nil, err |
| 82 | } |
| 83 | _, copyErr := io.CopyN(file, tr, h.Size) |
| 84 | closeErr := file.Close() |
| 85 | if err := errors.Join(copyErr, closeErr); err != nil { |
| 86 | return nil, nil, err |
| 87 | } |
| 88 | } |
| 89 | for _, name := range []string{"reasonix-desktop", "reasonix", "reasonix-launcher"} { |
| 90 | if !seen[name] { |
| 91 | return nil, nil, fmt.Errorf("release missing %s", name) |
| 92 | } |
| 93 | } |
| 94 | members, err := installlayout.ShellMembers(staging, "linux") |
| 95 | if err != nil { |
| 96 | return nil, nil, err |
| 97 | } |
| 98 | if len(members) == 0 { |
| 99 | return nil, nil, fmt.Errorf("release missing Electron shell; install the complete package manually") |
| 100 | } |
| 101 | for _, name := range []string{"reasonix-desktop", "reasonix"} { |
| 102 | members = append(members, installlayout.Member{Name: name, Path: filepath.Join(staging, name), Mode: 0755}) |
| 103 | } |
| 104 | names := make([]string, 0, len(members)) |
| 105 | for _, m := range members { |
| 106 | names = append(names, m.Name) |
| 107 | } |
| 108 | return members, names, nil |
| 109 | } |
| 110 | |
| 111 | func activateLinuxShellRelease(archive []byte, targetVersion, root string) error { |
| 112 | if _, err := installlayout.ReadCurrent(root); err != nil && !os.IsNotExist(err) { |
| 113 | return fmt.Errorf("resolve Linux layout: %w", err) |
| 114 | } |
| 115 | targetVersion = strings.TrimSpace(targetVersion) |
| 116 | if !strings.HasPrefix(targetVersion, "v") { |
| 117 | targetVersion = "v" + targetVersion |
| 118 | } |
| 119 | if err := installlayout.ValidateVersionName(targetVersion); err != nil { |
| 120 | return err |
| 121 | } |
| 122 | staging, err := os.MkdirTemp(root, ".reasonix-linux-update-*") |
| 123 | if err != nil { |
| 124 | return err |
| 125 | } |
| 126 | defer os.RemoveAll(staging) |
| 127 | members, names, err := stageLinuxShellRelease(archive, staging) |
| 128 | if err != nil { |
| 129 | return err |
| 130 | } |
| 131 | err = installlayout.ActivateVersion(installlayout.ActivationRequest{ |
| 132 | InstallRoot: root, Version: targetVersion, RequestID: "linux-" + targetVersion, Members: members, RequiredNames: names, |
| 133 | RootMembers: []installlayout.Member{{Name: "reasonix-launcher", Path: filepath.Join(staging, "reasonix-launcher"), Mode: 0755}, {Name: "reasonix", Path: filepath.Join(staging, "reasonix"), Mode: 0755}}, |
| 134 | RequiredRootNames: []string{"reasonix-launcher", "reasonix"}, |
| 135 | }) |
| 136 | if err != nil { |
| 137 | return fmt.Errorf("activate Linux release: %w", err) |
| 138 | } |
| 139 | _ = installlayout.RetainPreviousVersions(root, 0) |
| 140 | return nil |
| 141 | } |
| 142 |