mirror of
https://github.com/wwiinnddyy/LanMountainDesktop.git
synced 2026-06-21 16:14:28 +08:00
* 激进的更新 * 试试 * fix.可爱的我一直在修CI( * fix.启动器一定要能够启动 * feat.尝试弄了AOT的启动器。 * fix.修CI,好像是因为Linux那边有个问题,反正修就对了。 * fix.ci难修,为什么liunx跑不起来呢? * Update build.yml * Update LanMountainDesktop.csproj * changed.调整了启动逻辑,优化了更新页面。 * changed.优化了更新体验 * feat.依旧试增量更新这一块,看看velopack * fix.我们试验性地修复了启动器无法正常启动的问题,原因可能是这个画面没有启动,就GUI没显示。然后还把编译问题修了一下。 * fix.继续修ci,ci怎么天天炸 * changed.velopack,试试rust * fix.修ci,修融合桌面,修启动器 * fix.GitHub Action工作流怎么天天出问题 * feat.引入velopack,不好,是rust(至少内存很安全了。 * chore: migrate release pipeline to signed filemap and wire rainyun s3 * fix: make optional s3 upload step workflow-parse safe * fix: make delta pack generation robust for empty diffs and linux paths * chore: rotate launcher update public key for pdc signing * fix: restore stable launcher update public key * fix: sync launcher public key with update signing secret * fix: normalize PEM line endings in signing key validation * fix: rotate launcher public key to match ci signing secret * fix: compare signing keys by SPKI instead of PEM text * refactor update backend to host-managed PDC pipeline * fix release workflow env key collisions * relax publish-pdc precheck to require S3 only * set GH_TOKEN for PDCC installer step * ci: add local pdc mock fallback for release publish * ci: fix pdc mock process log redirection * ci: fallback pdcc signing key to update private key * ci: ensure pdcc signing passphrase env is always set * ci: create pdcc publish root before invoking client * ci: set pdcc version variable from release version * ci: decouple pdcc installer version from publish config version * ci: package pdcc subchannels with generated filemap and changelog * ci: make local pdc mock diff return empty for fast fallback * ci: fix pdcc variable mapping and pdc signing prechecks * Update App.axaml.cs * ci: wire aws cli credentials for rainyun s3 * ci: pin pdcc client version separately from app version * ci: harden local pdc mock transport handling * ci: publish pdcc subchannels in one pass * ci: add pdcc publish heartbeat and timeout * ci: fix pdcc publish workdir bootstrap * feat.Penguin Logistics Online Network Distribution System * ci: fix plonds s3 probe and signing fallback * ci: validate signing key and quiet missing baselines * ci: relax aws checksum mode for rainyun s3 * ci: avoid multipart uploads to rainyun s3 * ci: handle empty plonds baselines safely * ci.plonds * Rebuild release pipeline around PLONDS and DDSS * Fix Windows installer script path in release workflow
229 lines
8.8 KiB
C#
229 lines
8.8 KiB
C#
using Plonds.Core.Security;
|
|
using Plonds.Shared.Models;
|
|
|
|
namespace Plonds.Core.Publishing;
|
|
|
|
public sealed class PlondsDeltaBuilder
|
|
{
|
|
private readonly RsaFileSigner _signer = new();
|
|
|
|
public PlondsDeltaBuildResult Build(PlondsDeltaBuildOptions options)
|
|
{
|
|
ArgumentNullException.ThrowIfNull(options);
|
|
|
|
var currentPayloadZip = Path.GetFullPath(options.CurrentPayloadZip);
|
|
if (!File.Exists(currentPayloadZip))
|
|
{
|
|
throw new FileNotFoundException("Current payload zip not found.", currentPayloadZip);
|
|
}
|
|
|
|
var baselinePayloadZip = string.IsNullOrWhiteSpace(options.BaselinePayloadZip)
|
|
? null
|
|
: Path.GetFullPath(options.BaselinePayloadZip);
|
|
if (!string.IsNullOrWhiteSpace(baselinePayloadZip) && !File.Exists(baselinePayloadZip))
|
|
{
|
|
throw new FileNotFoundException("Baseline payload zip not found.", baselinePayloadZip);
|
|
}
|
|
|
|
var outputRoot = Path.GetFullPath(options.OutputRoot);
|
|
var workRoot = Path.Combine(outputRoot, "work", options.Platform);
|
|
var currentExtractRoot = Path.Combine(workRoot, "current");
|
|
var baselineExtractRoot = Path.Combine(workRoot, "baseline");
|
|
var objectsRoot = Path.Combine(workRoot, "objects");
|
|
var releaseAssetsRoot = Path.Combine(outputRoot, "release-assets");
|
|
var summaryRoot = Path.Combine(outputRoot, "platform-summaries");
|
|
|
|
Directory.CreateDirectory(releaseAssetsRoot);
|
|
Directory.CreateDirectory(summaryRoot);
|
|
PayloadUtilities.ExtractZip(currentPayloadZip, currentExtractRoot);
|
|
|
|
var useFullPayload = options.IsFullPayload || string.IsNullOrWhiteSpace(baselinePayloadZip);
|
|
if (useFullPayload)
|
|
{
|
|
PayloadUtilities.EnsureCleanDirectory(baselineExtractRoot);
|
|
}
|
|
else
|
|
{
|
|
PayloadUtilities.ExtractZip(baselinePayloadZip!, baselineExtractRoot);
|
|
}
|
|
|
|
PayloadUtilities.EnsureCleanDirectory(objectsRoot);
|
|
|
|
var previousManifest = useFullPayload
|
|
? new Dictionary<string, PayloadUtilities.FileFingerprint>(StringComparer.OrdinalIgnoreCase)
|
|
: PayloadUtilities.ScanDirectory(baselineExtractRoot);
|
|
var currentManifest = PayloadUtilities.ScanDirectory(currentExtractRoot);
|
|
var fileEntries = BuildFileEntries(previousManifest, currentManifest, objectsRoot);
|
|
|
|
var updateAssetName = $"update-{options.Platform}.zip";
|
|
var fileMapAssetName = $"plonds-filemap-{options.Platform}.json";
|
|
var fileMapSignatureAssetName = fileMapAssetName + ".sig";
|
|
var distributionId = $"plonds-{options.CurrentVersion}-{options.Platform}";
|
|
var updateArchivePath = Path.Combine(releaseAssetsRoot, updateAssetName);
|
|
var fileMapPath = Path.Combine(releaseAssetsRoot, fileMapAssetName);
|
|
var fileMapSignaturePath = Path.Combine(releaseAssetsRoot, fileMapSignatureAssetName);
|
|
|
|
PayloadUtilities.CreatePayloadZip(objectsRoot, updateArchivePath);
|
|
|
|
var metadata = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
|
|
{
|
|
["protocol"] = "PLONDS",
|
|
["channel"] = options.Channel,
|
|
["releaseTag"] = options.CurrentTag,
|
|
["baselineTag"] = options.BaselineTag ?? string.Empty,
|
|
["baselineVersion"] = options.BaselineVersion ?? "0.0.0",
|
|
["targetVersion"] = options.CurrentVersion,
|
|
["isFullPayload"] = useFullPayload ? "true" : "false"
|
|
};
|
|
|
|
var component = new ComponentDocument(
|
|
Name: "app",
|
|
Version: options.CurrentVersion,
|
|
Metadata: new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
|
|
{
|
|
["component"] = "app",
|
|
["mode"] = "file-object"
|
|
},
|
|
Files: fileEntries);
|
|
|
|
var fileMap = new FileMapDocument(
|
|
FormatVersion: "1.0",
|
|
DistributionId: distributionId,
|
|
FromVersion: options.BaselineVersion ?? "0.0.0",
|
|
ToVersion: options.CurrentVersion,
|
|
Version: options.CurrentVersion,
|
|
Platform: options.Platform,
|
|
Arch: PayloadUtilities.ResolveArch(options.Platform),
|
|
Channel: options.Channel,
|
|
GeneratedAt: DateTimeOffset.UtcNow,
|
|
Metadata: metadata,
|
|
Components: [component],
|
|
Files: fileEntries);
|
|
|
|
PayloadUtilities.WriteJson(fileMapPath, fileMap);
|
|
_signer.SignFile(fileMapPath, options.PrivateKeyPath, fileMapSignaturePath);
|
|
|
|
var summary = new PlondsReleasePlatformEntry(
|
|
Platform: options.Platform,
|
|
DistributionId: distributionId,
|
|
BaselineTag: options.BaselineTag,
|
|
BaselineVersion: options.BaselineVersion ?? "0.0.0",
|
|
TargetVersion: options.CurrentVersion,
|
|
IsFullPayload: useFullPayload,
|
|
FilesZipAsset: $"files-{options.Platform}.zip",
|
|
UpdateZipAsset: updateAssetName,
|
|
FileMapAsset: fileMapAssetName,
|
|
FileMapSignatureAsset: fileMapSignatureAssetName,
|
|
Sha256: PayloadUtilities.ComputeSha256(updateArchivePath));
|
|
|
|
var summaryPath = Path.Combine(summaryRoot, $"platform-summary-{options.Platform}.json");
|
|
PayloadUtilities.WriteJson(summaryPath, summary);
|
|
|
|
return new PlondsDeltaBuildResult(
|
|
options.Platform,
|
|
distributionId,
|
|
updateArchivePath,
|
|
fileMapPath,
|
|
fileMapSignaturePath,
|
|
summaryPath,
|
|
useFullPayload,
|
|
options.BaselineTag,
|
|
options.BaselineVersion,
|
|
options.CurrentVersion);
|
|
}
|
|
|
|
private static List<FileEntryDocument> BuildFileEntries(
|
|
IReadOnlyDictionary<string, PayloadUtilities.FileFingerprint> previousManifest,
|
|
IReadOnlyDictionary<string, PayloadUtilities.FileFingerprint> currentManifest,
|
|
string objectsRoot)
|
|
{
|
|
var result = new List<FileEntryDocument>();
|
|
|
|
foreach (var path in currentManifest.Keys.OrderBy(static x => x, StringComparer.OrdinalIgnoreCase))
|
|
{
|
|
var current = currentManifest[path];
|
|
if (previousManifest.TryGetValue(path, out var previous) &&
|
|
string.Equals(current.Sha256, previous.Sha256, StringComparison.OrdinalIgnoreCase))
|
|
{
|
|
result.Add(new FileEntryDocument(
|
|
Path: path,
|
|
Action: "reuse",
|
|
Sha256: current.Sha256,
|
|
Size: current.Size,
|
|
ObjectPath: null,
|
|
ObjectKey: null,
|
|
Metadata: null));
|
|
continue;
|
|
}
|
|
|
|
var action = previousManifest.ContainsKey(path) ? "replace" : "add";
|
|
var objectPath = PayloadUtilities.CopyObject(current.FullPath, objectsRoot, current.Sha256);
|
|
var metadata = new Dictionary<string, string>(StringComparer.OrdinalIgnoreCase)
|
|
{
|
|
["mode"] = "file-object"
|
|
};
|
|
if (!string.IsNullOrWhiteSpace(current.UnixFileMode))
|
|
{
|
|
metadata["unixFileMode"] = current.UnixFileMode!;
|
|
}
|
|
|
|
result.Add(new FileEntryDocument(
|
|
Path: path,
|
|
Action: action,
|
|
Sha256: current.Sha256,
|
|
Size: current.Size,
|
|
ObjectPath: objectPath,
|
|
ObjectKey: objectPath,
|
|
Metadata: metadata));
|
|
}
|
|
|
|
foreach (var path in previousManifest.Keys.OrderBy(static x => x, StringComparer.OrdinalIgnoreCase))
|
|
{
|
|
if (currentManifest.ContainsKey(path))
|
|
{
|
|
continue;
|
|
}
|
|
|
|
result.Add(new FileEntryDocument(
|
|
Path: path,
|
|
Action: "delete",
|
|
Sha256: string.Empty,
|
|
Size: 0,
|
|
ObjectPath: null,
|
|
ObjectKey: null,
|
|
Metadata: null));
|
|
}
|
|
|
|
return result;
|
|
}
|
|
|
|
private sealed record FileMapDocument(
|
|
string FormatVersion,
|
|
string DistributionId,
|
|
string FromVersion,
|
|
string ToVersion,
|
|
string Version,
|
|
string Platform,
|
|
string Arch,
|
|
string Channel,
|
|
DateTimeOffset GeneratedAt,
|
|
IReadOnlyDictionary<string, string> Metadata,
|
|
IReadOnlyList<ComponentDocument> Components,
|
|
IReadOnlyList<FileEntryDocument> Files);
|
|
|
|
private sealed record ComponentDocument(
|
|
string Name,
|
|
string Version,
|
|
IReadOnlyDictionary<string, string>? Metadata,
|
|
IReadOnlyList<FileEntryDocument> Files);
|
|
|
|
private sealed record FileEntryDocument(
|
|
string Path,
|
|
string Action,
|
|
string Sha256,
|
|
long Size,
|
|
string? ObjectPath,
|
|
string? ObjectKey,
|
|
IReadOnlyDictionary<string, string>? Metadata);
|
|
}
|