cli_tools/import_precheck/precheck/check_sha2.go

//  Copyright 2017 Google Inc. All Rights Reserved.
//
//  Licensed under the Apache License, Version 2.0 (the "License");
//  you may not use this file except in compliance with the License.
//  You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
//  Unless required by applicable law or agreed to in writing, software
//  distributed under the License is distributed on an "AS IS" BASIS,
//  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
//  See the License for the specific language governing permissions and
//  limitations under the License.

package precheck

import (
	"context"
	"fmt"
	"runtime"
	"strings"

	"github.com/GoogleCloudPlatform/osconfig/osinfo"
	"github.com/GoogleCloudPlatform/osconfig/packages"
)

const sha2Windows2008R2KB = "KB4474419"

// SHA2DriverSigningCheck is a precheck.Check that confirms a Windows 2008 system
// has KB4474419 installed.
type SHA2DriverSigningCheck struct {
	OSInfo *osinfo.OSInfo
}

// GetName returns the name of the precheck step; this is shown to the user.
func (s *SHA2DriverSigningCheck) GetName() string {
	return "SHA2 Driver Signing Check"
}

// Run executes the precheck step.
func (s *SHA2DriverSigningCheck) Run() (*Report, error) {
	r := &Report{name: s.GetName()}
	if runtime.GOOS != "windows" || !strings.Contains(s.OSInfo.Version, "6.1") {
		r.result = Skipped
		r.Info("Only applicable on Windows 2008 systems.")
		return r, nil
	}

	ctx := context.Background()
	pkgs, err := packages.GetInstalledPackages(ctx)
	if err != nil {
		return nil, fmt.Errorf("GetInstalledPackages error: %s", err)
	}

	for _, pkg := range pkgs.WUA {
		for _, id := range pkg.KBArticleIDs {
			if id == sha2Windows2008R2KB {
				r.Info(fmt.Sprintf("Windows Update containing SHA2 driver signing support found: %v", pkg))
				return r, nil
			}
		}
	}
	for _, pkg := range pkgs.QFE {
		if pkg.HotFixID == sha2Windows2008R2KB {
			r.Info(fmt.Sprintf("Windows Update containing SHA2 driver signing support found: %v", pkg))
			return r, nil
		}
	}
	r.Fatal(fmt.Sprintf("%s is required to support SHA2-signed drivers.", sha2Windows2008R2KB))
	return r, nil
}