fix: reject stale first-boot scripts in OTA release payloads

2026-10-05 18:44:46 -04:00
parent d9775ac144
commit ccf823590a
6 changed files with 193 additions and 0 deletions
@@ -114,6 +114,10 @@ for i in $(seq 0 $((COMPONENT_COUNT - 1))); do
    if [ "$ACTUAL_SIZE" != "$DECLARED_SIZE" ]; then
        fail "component '$NAME' size mismatch (declared=$DECLARED_SIZE actual=$ACTUAL_SIZE)"
    fi
+    if [[ "$NAME" == *frontend*.tar.gz ]]; then
+        python3 "$REPO_ROOT/scripts/check-ota-runtime.py" "$FILE" \
+            || fail "frontend runtime payload is stale or incomplete"
+    fi
    ok "component '$NAME': sha256 + size match on-disk artifact"
 done