mirror of
https://github.com/privatevoid-net/nix-super.git
synced 2024-11-24 23:06:16 +02:00
598deb2b23
Flakes still reside in the Nix store (so there shouldn't be any change in behaviour), but they are now accessed via the rootFS accessor. Since rootFS implements access checks, we no longer have to worry about flake.{nix,lock} or their parents being symlinks that escape from the flake. Extracted from the lazy-trees branch.
372 lines
11 KiB
C++
372 lines
11 KiB
C++
#include "lockfile.hh"
|
|
#include "store-api.hh"
|
|
#include "url-parts.hh"
|
|
|
|
#include <algorithm>
|
|
#include <iomanip>
|
|
|
|
#include <iterator>
|
|
#include <nlohmann/json.hpp>
|
|
|
|
namespace nix::flake {
|
|
|
|
FlakeRef getFlakeRef(
|
|
const nlohmann::json & json,
|
|
const char * attr,
|
|
const char * info)
|
|
{
|
|
auto i = json.find(attr);
|
|
if (i != json.end()) {
|
|
auto attrs = fetchers::jsonToAttrs(*i);
|
|
// FIXME: remove when we drop support for version 5.
|
|
if (info) {
|
|
auto j = json.find(info);
|
|
if (j != json.end()) {
|
|
for (auto k : fetchers::jsonToAttrs(*j))
|
|
attrs.insert_or_assign(k.first, k.second);
|
|
}
|
|
}
|
|
return FlakeRef::fromAttrs(attrs);
|
|
}
|
|
|
|
throw Error("attribute '%s' missing in lock file", attr);
|
|
}
|
|
|
|
LockedNode::LockedNode(const nlohmann::json & json)
|
|
: lockedRef(getFlakeRef(json, "locked", "info")) // FIXME: remove "info"
|
|
, originalRef(getFlakeRef(json, "original", nullptr))
|
|
, isFlake(json.find("flake") != json.end() ? (bool) json["flake"] : true)
|
|
{
|
|
if (!lockedRef.input.isLocked())
|
|
throw Error("lock file contains unlocked input '%s'",
|
|
fetchers::attrsToJSON(lockedRef.input.toAttrs()));
|
|
}
|
|
|
|
StorePath LockedNode::computeStorePath(Store & store) const
|
|
{
|
|
return lockedRef.input.computeStorePath(store);
|
|
}
|
|
|
|
|
|
static std::shared_ptr<Node> doFind(const ref<Node>& root, const InputPath & path, std::vector<InputPath>& visited) {
|
|
auto pos = root;
|
|
|
|
auto found = std::find(visited.cbegin(), visited.cend(), path);
|
|
|
|
if(found != visited.end()) {
|
|
std::vector<std::string> cycle;
|
|
std::transform(found, visited.cend(), std::back_inserter(cycle), printInputPath);
|
|
cycle.push_back(printInputPath(path));
|
|
throw Error("follow cycle detected: [%s]", concatStringsSep(" -> ", cycle));
|
|
}
|
|
visited.push_back(path);
|
|
|
|
for (auto & elem : path) {
|
|
if (auto i = get(pos->inputs, elem)) {
|
|
if (auto node = std::get_if<0>(&*i))
|
|
pos = *node;
|
|
else if (auto follows = std::get_if<1>(&*i)) {
|
|
if (auto p = doFind(root, *follows, visited))
|
|
pos = ref(p);
|
|
else
|
|
return {};
|
|
}
|
|
} else
|
|
return {};
|
|
}
|
|
|
|
return pos;
|
|
}
|
|
|
|
std::shared_ptr<Node> LockFile::findInput(const InputPath & path)
|
|
{
|
|
std::vector<InputPath> visited;
|
|
return doFind(root, path, visited);
|
|
}
|
|
|
|
LockFile::LockFile(std::string_view contents, std::string_view path)
|
|
{
|
|
auto json = nlohmann::json::parse(contents);
|
|
|
|
auto version = json.value("version", 0);
|
|
if (version < 5 || version > 7)
|
|
throw Error("lock file '%s' has unsupported version %d", path, version);
|
|
|
|
std::map<std::string, ref<Node>> nodeMap;
|
|
|
|
std::function<void(Node & node, const nlohmann::json & jsonNode)> getInputs;
|
|
|
|
getInputs = [&](Node & node, const nlohmann::json & jsonNode)
|
|
{
|
|
if (jsonNode.find("inputs") == jsonNode.end()) return;
|
|
for (auto & i : jsonNode["inputs"].items()) {
|
|
if (i.value().is_array()) { // FIXME: remove, obsolete
|
|
InputPath path;
|
|
for (auto & j : i.value())
|
|
path.push_back(j);
|
|
node.inputs.insert_or_assign(i.key(), path);
|
|
} else {
|
|
std::string inputKey = i.value();
|
|
auto k = nodeMap.find(inputKey);
|
|
if (k == nodeMap.end()) {
|
|
auto & nodes = json["nodes"];
|
|
auto jsonNode2 = nodes.find(inputKey);
|
|
if (jsonNode2 == nodes.end())
|
|
throw Error("lock file references missing node '%s'", inputKey);
|
|
auto input = make_ref<LockedNode>(*jsonNode2);
|
|
k = nodeMap.insert_or_assign(inputKey, input).first;
|
|
getInputs(*input, *jsonNode2);
|
|
}
|
|
if (auto child = k->second.dynamic_pointer_cast<LockedNode>())
|
|
node.inputs.insert_or_assign(i.key(), ref(child));
|
|
else
|
|
// FIXME: replace by follows node
|
|
throw Error("lock file contains cycle to root node");
|
|
}
|
|
}
|
|
};
|
|
|
|
std::string rootKey = json["root"];
|
|
nodeMap.insert_or_assign(rootKey, root);
|
|
getInputs(*root, json["nodes"][rootKey]);
|
|
|
|
// FIXME: check that there are no cycles in version >= 7. Cycles
|
|
// between inputs are only possible using 'follows' indirections.
|
|
// Once we drop support for version <= 6, we can simplify the code
|
|
// a bit since we don't need to worry about cycles.
|
|
}
|
|
|
|
std::pair<nlohmann::json, LockFile::KeyMap> LockFile::toJSON() const
|
|
{
|
|
nlohmann::json nodes;
|
|
KeyMap nodeKeys;
|
|
std::unordered_set<std::string> keys;
|
|
|
|
std::function<std::string(const std::string & key, ref<const Node> node)> dumpNode;
|
|
|
|
dumpNode = [&](std::string key, ref<const Node> node) -> std::string
|
|
{
|
|
auto k = nodeKeys.find(node);
|
|
if (k != nodeKeys.end())
|
|
return k->second;
|
|
|
|
if (!keys.insert(key).second) {
|
|
for (int n = 2; ; ++n) {
|
|
auto k = fmt("%s_%d", key, n);
|
|
if (keys.insert(k).second) {
|
|
key = k;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
nodeKeys.insert_or_assign(node, key);
|
|
|
|
auto n = nlohmann::json::object();
|
|
|
|
if (!node->inputs.empty()) {
|
|
auto inputs = nlohmann::json::object();
|
|
for (auto & i : node->inputs) {
|
|
if (auto child = std::get_if<0>(&i.second)) {
|
|
inputs[i.first] = dumpNode(i.first, *child);
|
|
} else if (auto follows = std::get_if<1>(&i.second)) {
|
|
auto arr = nlohmann::json::array();
|
|
for (auto & x : *follows)
|
|
arr.push_back(x);
|
|
inputs[i.first] = std::move(arr);
|
|
}
|
|
}
|
|
n["inputs"] = std::move(inputs);
|
|
}
|
|
|
|
if (auto lockedNode = node.dynamic_pointer_cast<const LockedNode>()) {
|
|
n["original"] = fetchers::attrsToJSON(lockedNode->originalRef.toAttrs());
|
|
n["locked"] = fetchers::attrsToJSON(lockedNode->lockedRef.toAttrs());
|
|
if (!lockedNode->isFlake)
|
|
n["flake"] = false;
|
|
}
|
|
|
|
nodes[key] = std::move(n);
|
|
|
|
return key;
|
|
};
|
|
|
|
nlohmann::json json;
|
|
json["version"] = 7;
|
|
json["root"] = dumpNode("root", root);
|
|
json["nodes"] = std::move(nodes);
|
|
|
|
return {json, std::move(nodeKeys)};
|
|
}
|
|
|
|
std::pair<std::string, LockFile::KeyMap> LockFile::to_string() const
|
|
{
|
|
auto [json, nodeKeys] = toJSON();
|
|
return {json.dump(2), std::move(nodeKeys)};
|
|
}
|
|
|
|
std::ostream & operator <<(std::ostream & stream, const LockFile & lockFile)
|
|
{
|
|
stream << lockFile.toJSON().first.dump(2);
|
|
return stream;
|
|
}
|
|
|
|
std::optional<FlakeRef> LockFile::isUnlocked() const
|
|
{
|
|
std::set<ref<const Node>> nodes;
|
|
|
|
std::function<void(ref<const Node> node)> visit;
|
|
|
|
visit = [&](ref<const Node> node)
|
|
{
|
|
if (!nodes.insert(node).second) return;
|
|
for (auto & i : node->inputs)
|
|
if (auto child = std::get_if<0>(&i.second))
|
|
visit(*child);
|
|
};
|
|
|
|
visit(root);
|
|
|
|
for (auto & i : nodes) {
|
|
if (i == ref<const Node>(root)) continue;
|
|
auto node = i.dynamic_pointer_cast<const LockedNode>();
|
|
if (node && !node->lockedRef.input.isLocked())
|
|
return node->lockedRef;
|
|
}
|
|
|
|
return {};
|
|
}
|
|
|
|
bool LockFile::operator ==(const LockFile & other) const
|
|
{
|
|
// FIXME: slow
|
|
return toJSON().first == other.toJSON().first;
|
|
}
|
|
|
|
bool LockFile::operator !=(const LockFile & other) const
|
|
{
|
|
return !(*this == other);
|
|
}
|
|
|
|
InputPath parseInputPath(std::string_view s)
|
|
{
|
|
InputPath path;
|
|
|
|
for (auto & elem : tokenizeString<std::vector<std::string>>(s, "/")) {
|
|
if (!std::regex_match(elem, flakeIdRegex))
|
|
throw UsageError("invalid flake input path element '%s'", elem);
|
|
path.push_back(elem);
|
|
}
|
|
|
|
return path;
|
|
}
|
|
|
|
std::map<InputPath, Node::Edge> LockFile::getAllInputs() const
|
|
{
|
|
std::set<ref<Node>> done;
|
|
std::map<InputPath, Node::Edge> res;
|
|
|
|
std::function<void(const InputPath & prefix, ref<Node> node)> recurse;
|
|
|
|
recurse = [&](const InputPath & prefix, ref<Node> node)
|
|
{
|
|
if (!done.insert(node).second) return;
|
|
|
|
for (auto &[id, input] : node->inputs) {
|
|
auto inputPath(prefix);
|
|
inputPath.push_back(id);
|
|
res.emplace(inputPath, input);
|
|
if (auto child = std::get_if<0>(&input))
|
|
recurse(inputPath, *child);
|
|
}
|
|
};
|
|
|
|
recurse({}, root);
|
|
|
|
return res;
|
|
}
|
|
|
|
static std::string describe(const FlakeRef & flakeRef)
|
|
{
|
|
auto s = fmt("'%s'", flakeRef.to_string());
|
|
|
|
if (auto lastModified = flakeRef.input.getLastModified())
|
|
s += fmt(" (%s)", std::put_time(std::gmtime(&*lastModified), "%Y-%m-%d"));
|
|
|
|
return s;
|
|
}
|
|
|
|
std::ostream & operator <<(std::ostream & stream, const Node::Edge & edge)
|
|
{
|
|
if (auto node = std::get_if<0>(&edge))
|
|
stream << describe((*node)->lockedRef);
|
|
else if (auto follows = std::get_if<1>(&edge))
|
|
stream << fmt("follows '%s'", printInputPath(*follows));
|
|
return stream;
|
|
}
|
|
|
|
static bool equals(const Node::Edge & e1, const Node::Edge & e2)
|
|
{
|
|
if (auto n1 = std::get_if<0>(&e1))
|
|
if (auto n2 = std::get_if<0>(&e2))
|
|
return (*n1)->lockedRef == (*n2)->lockedRef;
|
|
if (auto f1 = std::get_if<1>(&e1))
|
|
if (auto f2 = std::get_if<1>(&e2))
|
|
return *f1 == *f2;
|
|
return false;
|
|
}
|
|
|
|
std::string LockFile::diff(const LockFile & oldLocks, const LockFile & newLocks)
|
|
{
|
|
auto oldFlat = oldLocks.getAllInputs();
|
|
auto newFlat = newLocks.getAllInputs();
|
|
|
|
auto i = oldFlat.begin();
|
|
auto j = newFlat.begin();
|
|
std::string res;
|
|
|
|
while (i != oldFlat.end() || j != newFlat.end()) {
|
|
if (j != newFlat.end() && (i == oldFlat.end() || i->first > j->first)) {
|
|
res += fmt("• " ANSI_GREEN "Added input '%s':" ANSI_NORMAL "\n %s\n",
|
|
printInputPath(j->first), j->second);
|
|
++j;
|
|
} else if (i != oldFlat.end() && (j == newFlat.end() || i->first < j->first)) {
|
|
res += fmt("• " ANSI_RED "Removed input '%s'" ANSI_NORMAL "\n", printInputPath(i->first));
|
|
++i;
|
|
} else {
|
|
if (!equals(i->second, j->second)) {
|
|
res += fmt("• " ANSI_BOLD "Updated input '%s':" ANSI_NORMAL "\n %s\n → %s\n",
|
|
printInputPath(i->first),
|
|
i->second,
|
|
j->second);
|
|
}
|
|
++i;
|
|
++j;
|
|
}
|
|
}
|
|
|
|
return res;
|
|
}
|
|
|
|
void LockFile::check()
|
|
{
|
|
auto inputs = getAllInputs();
|
|
|
|
for (auto & [inputPath, input] : inputs) {
|
|
if (auto follows = std::get_if<1>(&input)) {
|
|
if (!follows->empty() && !findInput(*follows))
|
|
throw Error("input '%s' follows a non-existent input '%s'",
|
|
printInputPath(inputPath),
|
|
printInputPath(*follows));
|
|
}
|
|
}
|
|
}
|
|
|
|
void check();
|
|
|
|
std::string printInputPath(const InputPath & path)
|
|
{
|
|
return concatStringsSep("/", path);
|
|
}
|
|
|
|
}
|