bastion 0.53.2

client-go/ops_exec_other.go

@@ -0,0 +1,95 @@
+//go:build !linux
+
+package main
+
+// ops_exec_other.go — no sandbox on Windows or macOS in rung 6: every op is
+// refused with the sentence, and the beat says so (those machines take the
+// bastion's built-in ops until a sandbox exists there).
+
+import (
+	"errors"
+
+	"github.com/gorilla/websocket"
+)
+
+type opChange struct {
+	Path   string `json:"path"`
+	Kind   string `json:"kind"`
+	Size   int64  `json:"size,omitempty"`
+	Mode   string `json:"mode,omitempty"`
+	Digest string `json:"sha256,omitempty"`
+	Diff   string `json:"diff,omitempty"`
+	Note   string `json:"note,omitempty"`
+
+	src  string
+	from string
+}
+
+type opReport struct {
+	Mode          string            `json:"mode"`
+	Exit          int               `json:"exit"`
+	TimedOut      bool              `json:"timed_out,omitempty"`
+	Seconds       float64           `json:"seconds"`
+	Output        string            `json:"output"`
+	Changes       []opChange        `json:"changes"`
+	ChangesSHA256 string            `json:"changes_sha256"`
+	Committed     []string          `json:"committed,omitempty"`
+	VerifyError   string            `json:"verify_error,omitempty"`
+	Verbs         []opVerbResult    `json:"verbs,omitempty"`
+	Checks        []opVerbResult    `json:"checks,omitempty"`
+	Receipts      []opSignedReceipt `json:"receipts,omitempty"`
+
+	run     string
+	cleanup func()
+}
+
+const opSandboxSubcommand = "__op-sandbox"
+
+func opSandboxAvailable() (bool, string) {
+	return false, "no op sandbox on this platform yet — this machine takes the bastion's built-in ops only"
+}
+
+func opRunSandboxed(_ string, _ *opManifest, _ string, _ string) (*opReport, error) {
+	_, why := opSandboxAvailable()
+	return nil, errors.New(why)
+}
+
+func opCommitUpper(_ *opReport) ([]string, error) {
+	return nil, errors.New("no op sandbox on this platform")
+}
+
+func opSandboxChildMain(_ string) int { return 125 }
+
+func opMountsUnder(_ string) []string { return nil }
+
+const (
+	opActionSubcommand      = "__op-action"
+	opActionChildSubcommand = "__op-action-child"
+	opActionProbeSubcommand = "__op-action-probe"
+)
+
+func opActionAvailable() (bool, string) {
+	return false, "no action-op sandbox on this platform"
+}
+
+func opRunAction(_ string, _ *opManifest, _ *opTerms, _, _ string, _ []string, _ *opPlanCtx) (*opReport, error) {
+	_, why := opActionAvailable()
+	return nil, errors.New(why)
+}
+
+func opActionOuterMain(_ string) int { return 125 }
+func opActionChildMain(_ string) int { return 125 }
+func opActionProbeMain(_ string) int { return 125 }
+func opStartupSweep()                {}
+
+func handlePlanLine(ws *websocket.Conn, _ string, _ []string) {
+	opFail(ws, "op_plan_line: no action-op sandbox on this platform")
+}
+
+func handlePlanUndo(ws *websocket.Conn, _ string, _ []string) {
+	opFail(ws, "op_plan_undo: no action-op sandbox on this platform")
+}
+
+func handlePlanStatus(ws *websocket.Conn, _ string, _ []string) {
+	opFail(ws, "op_plan_status: no action-op sandbox on this platform")
+}