Eventually, we will stop using the legacy Notary system, which means we will stop duplicating releases at <binary>-<channel>.tar.gz and expect clients to find the releases using the TUF metadata for that binary instead. This PR prepares for that by performing those steps when packaging.
This duplicates root.json (also located at ee/tuf/assets...) to avoid an import cycle. I didn't think this was a big enough deal to warrant pulling it out and moving it to a new shared location, but if others feel differently I'm happy to update.
directionless
commented
7 months ago
Eventually, we will stop using the legacy Notary system, which means we will stop duplicating releases at
<binary>-<channel>.tar.gzand expect clients to find the releases using the TUF metadata for that binary instead. This PR prepares for that by performing those steps when packaging.This duplicates
root.json(also located atee/tuf/assets...) to avoid an import cycle. I didn't think this was a big enough deal to warrant pulling it out and moving it to a new shared location, but if others feel differently I'm happy to update.Relates to https://github.com/kolide/launcher/issues/954, https://github.com/kolide/launcher/issues/1149