john
34 lines
1.2 KiB
JavaScript
34 lines
1.2 KiB
JavaScript
#!/usr/bin/env node
|
|
import { spawn } from 'node:child_process';
|
|
import path from 'node:path';
|
|
|
|
import { assertPortalRuntimePath, hashArtifact } from '../release-gate/artifact.mjs';
|
|
|
|
const root = path.resolve(new URL('..', import.meta.url).pathname);
|
|
const runtime = assertPortalRuntimePath(path.join(root, '.runtime', 'portal'), { repoRoot: root });
|
|
|
|
async function buildRuntime() {
|
|
const code = await new Promise((resolve, reject) => {
|
|
const child = spawn('npm', ['run', 'build:portal-runtime'], {
|
|
cwd: root,
|
|
env: process.env,
|
|
stdio: 'inherit',
|
|
});
|
|
child.once('error', reject);
|
|
child.once('close', (status) => resolve(status ?? 1));
|
|
});
|
|
if (code !== 0) throw new Error(`runtime rebuild failed with code ${code}`);
|
|
}
|
|
|
|
const candidate = await hashArtifact(runtime);
|
|
await buildRuntime();
|
|
const firstRebuild = await hashArtifact(runtime);
|
|
await buildRuntime();
|
|
const secondRebuild = await hashArtifact(runtime);
|
|
|
|
const hashes = [candidate.sha256, firstRebuild.sha256, secondRebuild.sha256];
|
|
if (new Set(hashes).size !== 1) {
|
|
throw new Error(`runtime is not reproducible: ${hashes.join(' != ')}`);
|
|
}
|
|
console.log(`PASS REL-03 reproducible runtime sha256=${candidate.sha256}`);
|