[WIP] User Invites

scripts/build-release-bundle.sh

@@ -1,17 +1,20 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-if [[ "$#" -ne 6 ]]; then
-    echo "usage: $0 BINARY_DIRECTORY PRODUCT_VERSION UPDATE_MANIFEST_URL UPDATE_PUBLIC_KEY UPDATE_SIGNATURE_URL OUTPUT.zip" >&2
+if [[ "$#" -ne 9 ]]; then
+    echo "usage: $0 BINARY_DIRECTORY PRODUCT_VERSION RELEASE_MANIFEST UPDATE_MANIFEST_URL UPDATE_PUBLIC_KEY UPDATE_SIGNATURE_URL UPDATE_CHANNEL UPDATE_SIGNING_KEY_ID OUTPUT.zip" >&2
     exit 2
 fi
 
 binary_directory="$1"
 product_version="$2"
-update_manifest_url="$3"
-update_public_key="$4"
-update_signature_url="$5"
-output="$6"
+release_manifest="$3"
+update_manifest_url="$4"
+update_public_key="$5"
+update_signature_url="$6"
+update_channel="$7"
+update_signing_key_id="$8"
+output="$9"
 repository_directory="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 contract="$repository_directory/iota-installer/bundle-files.txt"
 staging_directory="$(mktemp -d)"
@@ -21,6 +24,20 @@ if [[ ! "$product_version" =~ ^[0-9A-Za-z][0-9A-Za-z.+_-]*$ ]]; then
     echo "product version contains unsupported characters: $product_version" >&2
     exit 2
 fi
+if ! jq -e \
+    --arg product_version "$product_version" \
+    --arg channel "$update_channel" \
+    --arg key_id "$update_signing_key_id" \
+    '.product_version == $product_version
+        and .channel == $channel
+        and .release_signing_key_id == $key_id
+        and (.release_sequence | type == "number" and . > 0)
+        and (.published_at | type == "string" and length > 0)
+        and (.expires_at | type == "string" and length > 0)' \
+    "$release_manifest" >/dev/null; then
+    echo "release manifest identity or anti-rollback metadata is invalid" >&2
+    exit 2
+fi
 
 mkdir -p "$(dirname "$output")"
 output="$(cd "$(dirname "$output")" && pwd)/$(basename "$output")"
@@ -37,13 +54,15 @@ while IFS= read -r bundle_path; do
             install -m 0755 "$binary_directory/${bundle_path#bin/}" "$destination"
             ;;
         manifest.json)
-            printf '{"product_version":"%s"}\n' "$product_version" > "$destination"
+            install -m 0644 "$release_manifest" "$destination"
             ;;
         systemd/update.env)
-            printf 'IOTA_UPDATE_MANIFEST=%s\nIOTA_UPDATE_PUBLIC_KEY=%s\nIOTA_UPDATE_SIGNATURE=%s\n' \
+            printf 'IOTA_UPDATE_MANIFEST=%s\nIOTA_UPDATE_PUBLIC_KEY=%s\nIOTA_UPDATE_SIGNATURE=%s\nIOTA_UPDATE_CHANNEL=%s\nIOTA_UPDATE_SIGNING_KEY_ID=%s\n' \
                 "$update_manifest_url" \
                 "$update_public_key" \
                 "$update_signature_url" \
+                "$update_channel" \
+                "$update_signing_key_id" \
                 > "$destination"
             ;;
         *)

scripts/build-update-manifest.sh

@@ -1,25 +1,38 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-if [[ "$#" -ne 8 ]]; then
-    echo "usage: $0 BINARY_DIRECTORY PRODUCT_VERSION CHANNEL PUBLISHED_AT OS ARCHITECTURE BASE_URL OUTPUT.json" >&2
+if [[ "$#" -ne 10 ]]; then
+    echo "usage: $0 BINARY_DIRECTORY PRODUCT_VERSION CHANNEL RELEASE_SEQUENCE PUBLISHED_AT EXPIRES_AT OS ARCHITECTURE BASE_URL OUTPUT.json" >&2
     exit 2
 fi
 
 binary_directory="$1"
 product_version="$2"
 channel="$3"
-published_at="$4"
-operating_system="$5"
-architecture="$6"
-base_url="$(printf '%s' "$7" | sed 's#/$##')"
-output="$8"
+release_sequence="$4"
+published_at="$5"
+expires_at="$6"
+operating_system="$7"
+architecture="$8"
+base_url="$(printf '%s' "$9" | sed 's#/$##')"
+output="${10}"
 repository_directory="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 contract="$repository_directory/iota-updater/artifacts.tsv"
 staging_directory="$(mktemp -d)"
 artifacts="$staging_directory/artifacts.jsonl"
 trap 'rm -rf "$staging_directory"' EXIT
 
+if [[ ! "$release_sequence" =~ ^[1-9][0-9]*$ ]]; then
+    echo "release sequence must be a positive integer" >&2
+    exit 2
+fi
+published_epoch="$(date -d "$published_at" +%s)"
+expires_epoch="$(date -d "$expires_at" +%s)"
+if (( expires_epoch <= published_epoch )); then
+    echo "expires_at must be after published_at" >&2
+    exit 2
+fi
+
 while IFS=$'\t' read -r role artifact_path; do
     [[ -n "$role" && -n "$artifact_path" ]] || continue
     asset_name="$(basename "$artifact_path")"
@@ -40,12 +53,16 @@ mkdir -p "$(dirname "$output")"
 jq -s \
     --arg product_version "$product_version" \
     --arg channel "$channel" \
+    --argjson release_sequence "$release_sequence" \
     --arg published_at "$published_at" \
+    --arg expires_at "$expires_at" \
     --arg release_signing_key_id "primary" \
     '{
         product_version: $product_version,
         channel: $channel,
+        release_sequence: $release_sequence,
         published_at: $published_at,
+        expires_at: $expires_at,
         minimum_data_schema: 1,
         supported_ipc_min: 2,
         supported_ipc_max: 4,