Verify an installation

Check that the llama.cpp libraries are the files that the release published.

yzma install downloads shared libraries that your program then runs, so yzma checks each file.

See Verification for how the checks work. This page shows the commands and the Go code.

Check an installation

yzma verify --lib /path/to/lib

Flag	What it does
`--lib`, `-l`	The directory with the libraries. Also reads `YZMA_LIB`.
`--version`, `-v`	The `llama.cpp` version to expect.
`--strict`	Also fails when the directory has a file that this install did not put there.
`--json`	Writes the report as JSON.

The check reads the manifest that the install kept, so it needs no network.

Set the policy at install time

yzma install --lib /path/to/lib --verify require

Value	What it does
`available`	Checks a digest when there is one. Accepts an asset with none. This is the default.
`require`	Fails when an asset has no digest.
`off`	Does no check.

The YZMA_VERIFY environment variable sets the same thing.

Use require in a build that must be repeatable. The builds from llama-cpp-builder have digests. The llama.cpp release page publishes none, so an install from there gives ErrNoFileDigests.

Pin the digest

Put the manifest digest after the version:

yzma install --lib /path/to/lib --version b10783@sha256:abc123...

This gives you a value from outside the release host to check the manifest against. Use it when you need to know that the files never change.

A pinned setup does not stop unpinned versions from working, so an application can install a llama.cpp release that is newer than the one this yzma release pins.

Check from Go code

report, err := download.VerifyInstall(context.Background(), libPath, "")
if err != nil {
	return err
}

if !report.OK() {
	return fmt.Errorf("%d changed, %d missing", report.Changed, report.Missing)
}

An empty tag uses the release from the record. Pass a tag to name the release you expect. The record sits beside the libraries, so anything that can change the libraries can change the record. A tag makes the check resolve the assets of that release itself.

Set the policy from Go code

err := download.Install(ctx, target, libPath, download.ProgressTracker, nil,
	download.WithVerify(download.VerifyRequired))

ParseVerifyPolicy turns a string such as "require" into a policy.

What the report says

State	What it means
`FileOK`	The file matches the digest.
`FileChanged`	The file is there but the digest does not match.
`FileMissing`	The file is not there.
`FileUnexpected`	The directory has a file that is not an asset of this install.

FileUnexpected does not make OK false, because one directory can hold more than one install. Use --strict to make it fail. The record and the manifest belong to the install, so neither is counted.

An older installation

An installation that an earlier release of yzma made has no manifest. The first check then fetches one and saves it, so it needs a network. Later checks don’t.

Check the bindings

yzma-checker is a separate tool. It compares the FFI types and the constants in yzma against the llama.cpp headers for the build that yzma installs. It checks 296 bindings, 181 constants, 4 callbacks, and 5 function pointer members.

make check-ffi

This tool is for yzma developers. It is not part of a normal installation.