From e77ac9ab05574ae2ca4670e77130b61489f42dbc Mon Sep 17 00:00:00 2001 From: Veronica Pascu Date: Sun, 30 Aug 2026 14:50:23 +0200 Subject: [PATCH] feat: aggiunta contratti di lifecycle (update, rollback, chiavi repo, verity) --- distro/update/keys/repository.pub | 1 + distro/update/rollback-policy.yaml | 6 ++++++ distro/update/update-policy.yaml | 8 ++++++++ distro/verity/roothash.pub | 1 + 4 files changed, 16 insertions(+) create mode 100644 distro/update/keys/repository.pub create mode 100644 distro/update/rollback-policy.yaml create mode 100644 distro/update/update-policy.yaml create mode 100644 distro/verity/roothash.pub diff --git a/distro/update/keys/repository.pub b/distro/update/keys/repository.pub new file mode 100644 index 0000000..f208b08 --- /dev/null +++ b/distro/update/keys/repository.pub @@ -0,0 +1 @@ +ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG/zdos/update/key/placeholder zdos-update-repo-key diff --git a/distro/update/rollback-policy.yaml b/distro/update/rollback-policy.yaml new file mode 100644 index 0000000..f69b2f2 --- /dev/null +++ b/distro/update/rollback-policy.yaml @@ -0,0 +1,6 @@ +policy: "ZDOS Rollback Policy" +mechanism: "A/B_slots" +conditions: + - "boot_failure" + - "kernel_panic" +boot_attempts_before_rollback: 3 diff --git a/distro/update/update-policy.yaml b/distro/update/update-policy.yaml new file mode 100644 index 0000000..26f992e --- /dev/null +++ b/distro/update/update-policy.yaml @@ -0,0 +1,8 @@ +policy: "ZDOS Update Policy" +channels: + - "stable" + - "preview" +requirements: + minimum_version: "0.2.0" + signature_verification: strict +offline_updates: supported diff --git a/distro/verity/roothash.pub b/distro/verity/roothash.pub new file mode 100644 index 0000000..f41869a --- /dev/null +++ b/distro/verity/roothash.pub @@ -0,0 +1 @@ +# Placeholder per la chiave/hash dm-verity per proteggere il rootfs