Method emit

cc-eventlog/src/runtime_events.rs:58–89

(&self)

    }

    pub fn emit(&self) -> Result<()> {
        let logline = serde_json::to_string(self).context("failed to serialize event log")?;

        let logfile_path = std::path::Path::new(RUNTIME_EVENT_LOG_FILE);
        let logfile_dir = logfile_path
            .parent()
            .context("failed to get event log directory")?;
        fs::create_dir_all(logfile_dir).context("failed to create event log directory")?;

        let mut options = fs::OpenOptions::new();
        options.append(true).create(true);

        // Restrict runtime event log visibility and writability to the owner (root).
        // This avoids other processes in the CVM tampering with or reading the log.
        #[cfg(unix)]
        {
            use fs_err::os::unix::fs::OpenOptionsExt;
            options.mode(0o600);
        }

        let mut logfile = options
            .open(logfile_path)
            .context("failed to open event log file")?;

        logfile
            .write_all(logline.as_bytes())
            .context("failed to write to event log file")?;
        logfile
            .write_all(b"\n")
            .context("failed to write to event log file")?;
        Ok(())
    }

    pub fn sha384_digest(&self) -> [u8; 48] {
        self.digest::<Sha384>()