rebuilderd-worker-0.22.1/.cargo_vcs_info.json0000644000000001440000000000100145450ustar { "git": { "sha1": "0df3e3f9cbdd02edd52d5a2bbde9e42718c2e268" }, "path_in_vcs": "worker" }rebuilderd-worker-0.22.1/.dockerignore000064400000000000000000000000531046102023000160100ustar 00000000000000build cache rebuilder.key rebuilder.v2.key rebuilderd-worker-0.22.1/Cargo.lock0000644000001541300000000000100125250ustar # This file is automatically @generated by Cargo. # It is not intended for manual editing. version = 4 [[package]] name = "addr2line" version = "0.24.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1" dependencies = [ "gimli", ] [[package]] name = "adler2" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627" [[package]] name = "aho-corasick" version = "1.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916" dependencies = [ "memchr", ] [[package]] name = "android-tzdata" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0" [[package]] name = "android_system_properties" version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311" dependencies = [ "libc", ] [[package]] name = "anstream" version = "0.6.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b" dependencies = [ "anstyle", "anstyle-parse", "anstyle-query", "anstyle-wincon", "colorchoice", "is_terminal_polyfill", "utf8parse", ] [[package]] name = "anstyle" version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9" [[package]] name = "anstyle-parse" version = "0.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9" dependencies = [ "utf8parse", ] [[package]] name = "anstyle-query" version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "anstyle-wincon" version = "3.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e" dependencies = [ "anstyle", "once_cell", "windows-sys 0.59.0", ] [[package]] name = "anyhow" version = "1.0.96" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6b964d184e89d9b6b67dd2715bc8e74cf3107fb2b529990c90cf517326150bf4" [[package]] name = "async-trait" version = "0.1.86" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "644dd749086bf3771a2fbc5f256fdb982d53f011c7d5d560304eafeecebce79d" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "autocfg" version = "1.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26" [[package]] name = "backtrace" version = "0.3.74" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8d82cb332cdfaed17ae235a638438ac4d4839913cc2af585c3c6746e8f8bee1a" dependencies = [ "addr2line", "cfg-if", "libc", "miniz_oxide", "object", "rustc-demangle", "windows-targets", ] [[package]] name = "base64" version = "0.22.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" [[package]] name = "bitflags" version = "2.8.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f68f53c83ab957f72c32642f3868eec03eb974d1fb82e453128456482613d36" [[package]] name = "bumpalo" version = "3.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf" [[package]] name = "byteorder" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" [[package]] name = "bytes" version = "1.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f61dac84819c6588b558454b194026eb1f09c293b9036ae9b159e74e73ab6cf9" [[package]] name = "cc" version = "1.2.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c736e259eea577f443d5c86c304f9f4ae0295c43f3ba05c21f1d66b5f06001af" dependencies = [ "shlex", ] [[package]] name = "cfg-if" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd" [[package]] name = "cfg_aliases" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724" [[package]] name = "chrono" version = "0.4.40" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1a7964611d71df112cb1730f2ee67324fcf4d0fc6606acbbe9bfe06df124637c" dependencies = [ "android-tzdata", "iana-time-zone", "js-sys", "num-traits", "serde", "wasm-bindgen", "windows-link", ] [[package]] name = "clap" version = "4.5.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "027bb0d98429ae334a8698531da7077bdf906419543a35a55c2cb1b66437d767" dependencies = [ "clap_builder", "clap_derive", ] [[package]] name = "clap_builder" version = "4.5.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5589e0cba072e0f3d23791efac0fd8627b49c829c196a492e88168e6a669d863" dependencies = [ "anstream", "anstyle", "clap_lex", "strsim", ] [[package]] name = "clap_derive" version = "4.5.28" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bf4ced95c6f4a675af3da73304b9ac4ed991640c36374e4b46795c49e17cf1ed" dependencies = [ "heck", "proc-macro2", "quote", "syn", ] [[package]] name = "clap_lex" version = "0.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6" [[package]] name = "colorchoice" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990" [[package]] name = "colored" version = "3.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fde0e0ec90c9dfb3b4b1a0891a7dcd0e2bffde2f7efed5fe7c9bb00e5bfb915e" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "core-foundation" version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b55271e5c8c478ad3f38ad24ef34923091e0548492a266d19b3c0b4d82574c63" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "core-foundation-sys" version = "0.8.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b" [[package]] name = "data-encoding" version = "2.8.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "575f75dfd25738df5b91b8e43e14d44bda14637a58fae779fd2b064f8bf3e010" [[package]] name = "derp" version = "0.0.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c9b84cfd9b6fa437e498215e5625e9e3ae3bf9bb54d623028a181c40820db169" dependencies = [ "untrusted 0.7.1", ] [[package]] name = "dirs-next" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b98cf8ebf19c3d1b223e151f99a4f9f0690dca41414773390fc824184ac833e1" dependencies = [ "cfg-if", "dirs-sys-next", ] [[package]] name = "dirs-sys-next" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4ebda144c4fe02d1f7ea1a7d9641b6fc6b580adcfa024ae48797ecdeb6825b4d" dependencies = [ "libc", "redox_users", "winapi", ] [[package]] name = "displaydoc" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "env_filter" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0" dependencies = [ "log", "regex", ] [[package]] name = "env_logger" version = "0.11.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dcaee3d8e3cfc3fd92428d477bc97fc29ec8716d180c0d74c643bb26166660e0" dependencies = [ "anstream", "anstyle", "env_filter", "humantime", "log", ] [[package]] name = "equivalent" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "errno" version = "0.3.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "33d852cb9b869c2a9b3df2f71a3074817f01e1844f839a144f5fcef059a4eb5d" dependencies = [ "libc", "windows-sys 0.59.0", ] [[package]] name = "fastrand" version = "2.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be" [[package]] name = "fnv" version = "1.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1" [[package]] name = "form_urlencoded" version = "1.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456" dependencies = [ "percent-encoding", ] [[package]] name = "futures" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876" dependencies = [ "futures-channel", "futures-core", "futures-executor", "futures-io", "futures-sink", "futures-task", "futures-util", ] [[package]] name = "futures-channel" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10" dependencies = [ "futures-core", "futures-sink", ] [[package]] name = "futures-core" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e" [[package]] name = "futures-executor" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f" dependencies = [ "futures-core", "futures-task", "futures-util", ] [[package]] name = "futures-io" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6" [[package]] name = "futures-macro" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "futures-sink" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7" [[package]] name = "futures-task" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988" [[package]] name = "futures-util" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81" dependencies = [ "futures-channel", "futures-core", "futures-io", "futures-macro", "futures-sink", "futures-task", "memchr", "pin-project-lite", "pin-utils", "slab", ] [[package]] name = "getrandom" version = "0.2.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c4567c8db10ae91089c99af84c68c38da3ec2f087c3f82960bcdbf3656b6f4d7" dependencies = [ "cfg-if", "js-sys", "libc", "wasi 0.11.0+wasi-snapshot-preview1", "wasm-bindgen", ] [[package]] name = "getrandom" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "43a49c392881ce6d5c3b8cb70f98717b7c07aabbdff06687b9030dbfbe2725f8" dependencies = [ "cfg-if", "libc", "wasi 0.13.3+wasi-0.2.2", "windows-targets", ] [[package]] name = "gimli" version = "0.31.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f" [[package]] name = "glob" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2" [[package]] name = "hashbrown" version = "0.15.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289" [[package]] name = "heck" version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" [[package]] name = "http" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f16ca2af56261c99fba8bac40a10251ce8188205a4c448fbb745a2e4daa76fea" dependencies = [ "bytes", "fnv", "itoa", ] [[package]] name = "http-body" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184" dependencies = [ "bytes", "http", ] [[package]] name = "http-body-util" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "793429d76616a256bcb62c2a2ec2bed781c8307e797e2598c50010f2bee2544f" dependencies = [ "bytes", "futures-util", "http", "http-body", "pin-project-lite", ] [[package]] name = "httparse" version = "1.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f2d708df4e7140240a16cd6ab0ab65c972d7433ab77819ea693fde9c43811e2a" [[package]] name = "humantime" version = "2.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9a3a5bfb195931eeb336b2a7b4d761daec841b97f947d34394601737a7bba5e4" [[package]] name = "hyper" version = "1.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80" dependencies = [ "bytes", "futures-channel", "futures-util", "http", "http-body", "httparse", "itoa", "pin-project-lite", "smallvec", "tokio", "want", ] [[package]] name = "hyper-rustls" version = "0.27.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2d191583f3da1305256f22463b9bb0471acad48a4e534a5218b9963e9c1f59b2" dependencies = [ "futures-util", "http", "hyper", "hyper-util", "rustls", "rustls-native-certs", "rustls-pki-types", "tokio", "tokio-rustls", "tower-service", ] [[package]] name = "hyper-util" version = "0.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "df2dcfbe0677734ab2f3ffa7fa7bfd4706bfdc1ef393f2ee30184aed67e631b4" dependencies = [ "bytes", "futures-channel", "futures-util", "http", "http-body", "hyper", "pin-project-lite", "socket2", "tokio", "tower-service", "tracing", ] [[package]] name = "iana-time-zone" version = "0.1.61" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "235e081f3925a06703c2d0117ea8b91f042756fd6e7a6e5d901e8ca1a996b220" dependencies = [ "android_system_properties", "core-foundation-sys", "iana-time-zone-haiku", "js-sys", "wasm-bindgen", "windows-core", ] [[package]] name = "iana-time-zone-haiku" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f" dependencies = [ "cc", ] [[package]] name = "icu_collections" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526" dependencies = [ "displaydoc", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_locid" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637" dependencies = [ "displaydoc", "litemap", "tinystr", "writeable", "zerovec", ] [[package]] name = "icu_locid_transform" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e" dependencies = [ "displaydoc", "icu_locid", "icu_locid_transform_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_locid_transform_data" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdc8ff3388f852bede6b579ad4e978ab004f139284d7b28715f773507b946f6e" [[package]] name = "icu_normalizer" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f" dependencies = [ "displaydoc", "icu_collections", "icu_normalizer_data", "icu_properties", "icu_provider", "smallvec", "utf16_iter", "utf8_iter", "write16", "zerovec", ] [[package]] name = "icu_normalizer_data" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f8cafbf7aa791e9b22bec55a167906f9e1215fd475cd22adfcf660e03e989516" [[package]] name = "icu_properties" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5" dependencies = [ "displaydoc", "icu_collections", "icu_locid_transform", "icu_properties_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_properties_data" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "67a8effbc3dd3e4ba1afa8ad918d5684b8868b3b26500753effea8d2eed19569" [[package]] name = "icu_provider" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9" dependencies = [ "displaydoc", "icu_locid", "icu_provider_macros", "stable_deref_trait", "tinystr", "writeable", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_provider_macros" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "idna" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e" dependencies = [ "idna_adapter", "smallvec", "utf8_iter", ] [[package]] name = "idna_adapter" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71" dependencies = [ "icu_normalizer", "icu_properties", ] [[package]] name = "in-toto" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34037907a12187df805f8581f4542ba3dd838794dca025adbbabbfc4d161eac7" dependencies = [ "chrono", "data-encoding", "derp", "glob", "itoa", "log", "path-clean", "pem", "ring", "serde", "serde_json", "strum", "strum_macros", "thiserror 2.0.11", "untrusted 0.7.1", "walkdir", ] [[package]] name = "indexmap" version = "2.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8c9c992b02b5b4c94ea26e32fe5bccb7aa7d9f390ab5c1221ff895bc7ea8b652" dependencies = [ "equivalent", "hashbrown", ] [[package]] name = "ipnet" version = "2.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130" [[package]] name = "is_terminal_polyfill" version = "1.70.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf" [[package]] name = "itoa" version = "1.0.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d75a2a4b1b190afb6f5425f10f6a8f959d2ea0b9c2b1d79553551850539e4674" [[package]] name = "js-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f" dependencies = [ "once_cell", "wasm-bindgen", ] [[package]] name = "libc" version = "0.2.170" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "875b3680cb2f8f71bdcf9a30f38d48282f5d3c95cbf9b3fa57269bb5d5c06828" [[package]] name = "libredox" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c0ff37bd590ca25063e35af745c343cb7a0271906fb7b37e4813e8f79f00268d" dependencies = [ "bitflags", "libc", ] [[package]] name = "linux-raw-sys" version = "0.4.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab" [[package]] name = "litemap" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856" [[package]] name = "log" version = "0.4.26" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "30bde2b3dc3671ae49d8e2e9f044c7c005836e7a023ee57cffa25ab82764bb9e" [[package]] name = "memchr" version = "2.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3" [[package]] name = "mime" version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a" [[package]] name = "miniz_oxide" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e3e04debbb59698c15bacbb6d93584a8c0ca9cc3213cb423d31f760d8843ce5" dependencies = [ "adler2", ] [[package]] name = "mio" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd" dependencies = [ "libc", "wasi 0.11.0+wasi-snapshot-preview1", "windows-sys 0.52.0", ] [[package]] name = "nix" version = "0.29.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46" dependencies = [ "bitflags", "cfg-if", "cfg_aliases", "libc", ] [[package]] name = "num-traits" version = "0.2.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841" dependencies = [ "autocfg", ] [[package]] name = "object" version = "0.36.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" dependencies = [ "memchr", ] [[package]] name = "once_cell" version = "1.20.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "945462a4b81e43c4e3ba96bd7b49d834c6f61198356aa858733bc4acf3cbe62e" [[package]] name = "openssl-probe" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e" [[package]] name = "path-clean" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "17359afc20d7ab31fdb42bb844c8b3bb1dabd7dcf7e68428492da7f16966fcef" [[package]] name = "pem" version = "3.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "38af38e8470ac9dee3ce1bae1af9c1671fffc44ddfd8bd1d0a3445bf349a8ef3" dependencies = [ "base64", "serde", ] [[package]] name = "percent-encoding" version = "2.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e" [[package]] name = "pin-project-lite" version = "0.2.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b" [[package]] name = "pin-utils" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184" [[package]] name = "ppv-lite86" version = "0.2.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "77957b295656769bb8ad2b6a6b09d897d94f05c41b069aede1fcdaa675eaea04" dependencies = [ "zerocopy", ] [[package]] name = "proc-macro2" version = "1.0.93" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "60946a68e5f9d28b0dc1c21bb8a97ee7d018a8b322fa57838ba31cc878e22d99" dependencies = [ "unicode-ident", ] [[package]] name = "quinn" version = "0.11.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "62e96808277ec6f97351a2380e6c25114bc9e67037775464979f3037c92d05ef" dependencies = [ "bytes", "pin-project-lite", "quinn-proto", "quinn-udp", "rustc-hash", "rustls", "socket2", "thiserror 2.0.11", "tokio", "tracing", ] [[package]] name = "quinn-proto" version = "0.11.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a2fe5ef3495d7d2e377ff17b1a8ce2ee2ec2a18cde8b6ad6619d65d0701c135d" dependencies = [ "bytes", "getrandom 0.2.15", "rand", "ring", "rustc-hash", "rustls", "rustls-pki-types", "slab", "thiserror 2.0.11", "tinyvec", "tracing", "web-time", ] [[package]] name = "quinn-udp" version = "0.5.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e46f3055866785f6b92bc6164b76be02ca8f2eb4b002c0354b28cf4c119e5944" dependencies = [ "cfg_aliases", "libc", "once_cell", "socket2", "tracing", "windows-sys 0.59.0", ] [[package]] name = "quote" version = "1.0.38" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0e4dccaaaf89514f546c693ddc140f729f958c247918a13380cccc6078391acc" dependencies = [ "proc-macro2", ] [[package]] name = "rand" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404" dependencies = [ "libc", "rand_chacha", "rand_core", ] [[package]] name = "rand_chacha" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" dependencies = [ "ppv-lite86", "rand_core", ] [[package]] name = "rand_core" version = "0.6.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" dependencies = [ "getrandom 0.2.15", ] [[package]] name = "rebuilderd-common" version = "0.22.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72e2f25b43fdcf1503b9cfb52019598f8aa1ef49d318147f3c14aaa801601c69" dependencies = [ "anyhow", "chrono", "clap", "colored", "dirs-next", "log", "reqwest", "serde", "toml", "url", ] [[package]] name = "rebuilderd-worker" version = "0.22.1" dependencies = [ "async-trait", "clap", "data-encoding", "env_logger", "futures", "futures-util", "in-toto", "nix", "rebuilderd-common", "serde", "serde_json", "tempfile", "tokio", "toml", "url", ] [[package]] name = "redox_users" version = "0.4.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ba009ff324d1fc1b900bd1fdb31564febe58a8ccc8a6fdbb93b543d33b13ca43" dependencies = [ "getrandom 0.2.15", "libredox", "thiserror 1.0.69", ] [[package]] name = "regex" version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191" dependencies = [ "aho-corasick", "memchr", "regex-automata", "regex-syntax", ] [[package]] name = "regex-automata" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908" dependencies = [ "aho-corasick", "memchr", "regex-syntax", ] [[package]] name = "regex-syntax" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c" [[package]] name = "reqwest" version = "0.12.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "43e734407157c3c2034e0258f5e4473ddb361b1e85f95a66690d67264d7cd1da" dependencies = [ "base64", "bytes", "futures-channel", "futures-core", "futures-util", "http", "http-body", "http-body-util", "hyper", "hyper-rustls", "hyper-util", "ipnet", "js-sys", "log", "mime", "once_cell", "percent-encoding", "pin-project-lite", "quinn", "rustls", "rustls-native-certs", "rustls-pemfile", "rustls-pki-types", "serde", "serde_json", "serde_urlencoded", "sync_wrapper", "tokio", "tokio-rustls", "tokio-util", "tower", "tower-service", "url", "wasm-bindgen", "wasm-bindgen-futures", "wasm-streams", "web-sys", "windows-registry", ] [[package]] name = "ring" version = "0.17.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "da5349ae27d3887ca812fb375b45a4fbb36d8d12d2df394968cd86e35683fe73" dependencies = [ "cc", "cfg-if", "getrandom 0.2.15", "libc", "untrusted 0.9.0", "windows-sys 0.52.0", ] [[package]] name = "rustc-demangle" version = "0.1.24" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f" [[package]] name = "rustc-hash" version = "2.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d" [[package]] name = "rustix" version = "0.38.44" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154" dependencies = [ "bitflags", "errno", "libc", "linux-raw-sys", "windows-sys 0.59.0", ] [[package]] name = "rustls" version = "0.23.23" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "47796c98c480fce5406ef69d1c76378375492c3b0a0de587be0c1d9feb12f395" dependencies = [ "once_cell", "ring", "rustls-pki-types", "rustls-webpki", "subtle", "zeroize", ] [[package]] name = "rustls-native-certs" version = "0.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fcff2dd52b58a8d98a70243663a0d234c4e2b79235637849d15913394a247d3" dependencies = [ "openssl-probe", "rustls-pki-types", "schannel", "security-framework", ] [[package]] name = "rustls-pemfile" version = "2.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50" dependencies = [ "rustls-pki-types", ] [[package]] name = "rustls-pki-types" version = "1.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "917ce264624a4b4db1c364dcc35bfca9ded014d0a958cd47ad3e960e988ea51c" dependencies = [ "web-time", ] [[package]] name = "rustls-webpki" version = "0.102.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "64ca1bc8749bd4cf37b5ce386cc146580777b4e8572c7b97baf22c83f444bee9" dependencies = [ "ring", "rustls-pki-types", "untrusted 0.9.0", ] [[package]] name = "rustversion" version = "1.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f7c45b9784283f1b2e7fb61b42047c2fd678ef0960d4f6f1eba131594cc369d4" [[package]] name = "ryu" version = "1.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6ea1a2d0a644769cc99faa24c3ad26b379b786fe7c36fd3c546254801650e6dd" [[package]] name = "same-file" version = "1.0.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502" dependencies = [ "winapi-util", ] [[package]] name = "schannel" version = "0.1.27" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f29ebaa345f945cec9fbbc532eb307f0fdad8161f281b6369539c8d84876b3d" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "security-framework" version = "3.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "271720403f46ca04f7ba6f55d438f8bd878d6b8ca0a1046e8228c4145bcbb316" dependencies = [ "bitflags", "core-foundation", "core-foundation-sys", "libc", "security-framework-sys", ] [[package]] name = "security-framework-sys" version = "2.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "49db231d56a190491cb4aeda9527f1ad45345af50b0851622a7adb8c03b01c32" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "serde" version = "1.0.218" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e8dfc9d19bdbf6d17e22319da49161d5d0108e4188e8b680aef6299eed22df60" dependencies = [ "serde_derive", ] [[package]] name = "serde_derive" version = "1.0.218" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f09503e191f4e797cb8aac08e9a4a4695c5edf6a2e70e376d961ddd5c969f82b" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "serde_json" version = "1.0.139" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "44f86c3acccc9c65b153fe1b85a3be07fe5515274ec9f0653b4a0875731c72a6" dependencies = [ "itoa", "memchr", "ryu", "serde", ] [[package]] name = "serde_spanned" version = "0.6.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "87607cb1398ed59d48732e575a4c28a7a8ebf2454b964fe3f224f2afc07909e1" dependencies = [ "serde", ] [[package]] name = "serde_urlencoded" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd" dependencies = [ "form_urlencoded", "itoa", "ryu", "serde", ] [[package]] name = "shlex" version = "1.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" [[package]] name = "signal-hook-registry" version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a9e9e0b4211b72e7b8b6e85c807d36c212bdb33ea8587f7569562a84df5465b1" dependencies = [ "libc", ] [[package]] name = "slab" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f92a496fb766b417c996b9c5e57daf2f7ad3b0bebe1ccfca4856390e3d3bb67" dependencies = [ "autocfg", ] [[package]] name = "smallvec" version = "1.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd" [[package]] name = "socket2" version = "0.5.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c970269d99b64e60ec3bd6ad27270092a5394c4e309314b18ae3fe575695fbe8" dependencies = [ "libc", "windows-sys 0.52.0", ] [[package]] name = "stable_deref_trait" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3" [[package]] name = "strsim" version = "0.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" [[package]] name = "strum" version = "0.26.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06" [[package]] name = "strum_macros" version = "0.26.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be" dependencies = [ "heck", "proc-macro2", "quote", "rustversion", "syn", ] [[package]] name = "subtle" version = "2.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" [[package]] name = "syn" version = "2.0.98" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "36147f1a48ae0ec2b5b3bc5b537d267457555a10dc06f3dbc8cb11ba3006d3b1" dependencies = [ "proc-macro2", "quote", "unicode-ident", ] [[package]] name = "sync_wrapper" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263" dependencies = [ "futures-core", ] [[package]] name = "synstructure" version = "0.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tempfile" version = "3.17.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "22e5a0acb1f3f55f65cc4a866c361b2fb2a0ff6366785ae6fbb5f85df07ba230" dependencies = [ "cfg-if", "fastrand", "getrandom 0.3.1", "once_cell", "rustix", "windows-sys 0.59.0", ] [[package]] name = "thiserror" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52" dependencies = [ "thiserror-impl 1.0.69", ] [[package]] name = "thiserror" version = "2.0.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d452f284b73e6d76dd36758a0c8684b1d5be31f92b89d07fd5822175732206fc" dependencies = [ "thiserror-impl 2.0.11", ] [[package]] name = "thiserror-impl" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "thiserror-impl" version = "2.0.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "26afc1baea8a989337eeb52b6e72a039780ce45c3edfcc9c5b9d112feeb173c2" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tinystr" version = "0.7.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f" dependencies = [ "displaydoc", "zerovec", ] [[package]] name = "tinyvec" version = "1.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "022db8904dfa342efe721985167e9fcd16c29b226db4397ed752a761cfce81e8" dependencies = [ "tinyvec_macros", ] [[package]] name = "tinyvec_macros" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20" [[package]] name = "tokio" version = "1.43.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d61fa4ffa3de412bfea335c6ecff681de2b609ba3c77ef3e00e521813a9ed9e" dependencies = [ "backtrace", "bytes", "libc", "mio", "pin-project-lite", "signal-hook-registry", "socket2", "tokio-macros", "windows-sys 0.52.0", ] [[package]] name = "tokio-macros" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tokio-rustls" version = "0.26.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5f6d0975eaace0cf0fcadee4e4aaa5da15b5c079146f2cffb67c113be122bf37" dependencies = [ "rustls", "tokio", ] [[package]] name = "tokio-util" version = "0.7.13" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d7fcaa8d55a2bdd6b83ace262b016eca0d79ee02818c5c1bcdf0305114081078" dependencies = [ "bytes", "futures-core", "futures-sink", "pin-project-lite", "tokio", ] [[package]] name = "toml" version = "0.8.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cd87a5cdd6ffab733b2f74bc4fd7ee5fff6634124999ac278c35fc78c6120148" dependencies = [ "serde", "serde_spanned", "toml_datetime", "toml_edit", ] [[package]] name = "toml_datetime" version = "0.6.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0dd7358ecb8fc2f8d014bf86f6f638ce72ba252a2c3a2572f2a795f1d23efb41" dependencies = [ "serde", ] [[package]] name = "toml_edit" version = "0.22.24" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "17b4795ff5edd201c7cd6dca065ae59972ce77d1b80fa0a84d94950ece7d1474" dependencies = [ "indexmap", "serde", "serde_spanned", "toml_datetime", "winnow", ] [[package]] name = "tower" version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9" dependencies = [ "futures-core", "futures-util", "pin-project-lite", "sync_wrapper", "tokio", "tower-layer", "tower-service", ] [[package]] name = "tower-layer" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e" [[package]] name = "tower-service" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3" [[package]] name = "tracing" version = "0.1.41" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0" dependencies = [ "pin-project-lite", "tracing-core", ] [[package]] name = "tracing-core" version = "0.1.33" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e672c95779cf947c5311f83787af4fa8fffd12fb27e4993211a84bdfd9610f9c" dependencies = [ "once_cell", ] [[package]] name = "try-lock" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" [[package]] name = "unicode-ident" version = "1.0.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "00e2473a93778eb0bad35909dff6a10d28e63f792f16ed15e404fca9d5eeedbe" [[package]] name = "untrusted" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a" [[package]] name = "untrusted" version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" [[package]] name = "url" version = "2.5.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60" dependencies = [ "form_urlencoded", "idna", "percent-encoding", ] [[package]] name = "utf16_iter" version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246" [[package]] name = "utf8_iter" version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" [[package]] name = "utf8parse" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" [[package]] name = "walkdir" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b" dependencies = [ "same-file", "winapi-util", ] [[package]] name = "want" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e" dependencies = [ "try-lock", ] [[package]] name = "wasi" version = "0.11.0+wasi-snapshot-preview1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423" [[package]] name = "wasi" version = "0.13.3+wasi-0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "26816d2e1a4a36a2940b96c5296ce403917633dff8f3440e9b236ed6f6bacad2" dependencies = [ "wit-bindgen-rt", ] [[package]] name = "wasm-bindgen" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5" dependencies = [ "cfg-if", "once_cell", "rustversion", "wasm-bindgen-macro", ] [[package]] name = "wasm-bindgen-backend" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6" dependencies = [ "bumpalo", "log", "proc-macro2", "quote", "syn", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-futures" version = "0.4.50" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61" dependencies = [ "cfg-if", "js-sys", "once_cell", "wasm-bindgen", "web-sys", ] [[package]] name = "wasm-bindgen-macro" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407" dependencies = [ "quote", "wasm-bindgen-macro-support", ] [[package]] name = "wasm-bindgen-macro-support" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de" dependencies = [ "proc-macro2", "quote", "syn", "wasm-bindgen-backend", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-shared" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d" dependencies = [ "unicode-ident", ] [[package]] name = "wasm-streams" version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65" dependencies = [ "futures-util", "js-sys", "wasm-bindgen", "wasm-bindgen-futures", "web-sys", ] [[package]] name = "web-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2" dependencies = [ "js-sys", "wasm-bindgen", ] [[package]] name = "web-time" version = "1.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb" dependencies = [ "js-sys", "wasm-bindgen", ] [[package]] name = "winapi" version = "0.3.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419" dependencies = [ "winapi-i686-pc-windows-gnu", "winapi-x86_64-pc-windows-gnu", ] [[package]] name = "winapi-i686-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" [[package]] name = "winapi-util" version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "winapi-x86_64-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" [[package]] name = "windows-core" version = "0.52.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "33ab640c8d7e35bf8ba19b884ba838ceb4fba93a4e8c65a9059d08afcfc683d9" dependencies = [ "windows-targets", ] [[package]] name = "windows-link" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6dccfd733ce2b1753b03b6d3c65edf020262ea35e20ccdf3e288043e6dd620e3" [[package]] name = "windows-registry" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e400001bb720a623c1c69032f8e3e4cf09984deec740f007dd2b03ec864804b0" dependencies = [ "windows-result", "windows-strings", "windows-targets", ] [[package]] name = "windows-result" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e" dependencies = [ "windows-targets", ] [[package]] name = "windows-strings" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10" dependencies = [ "windows-result", "windows-targets", ] [[package]] name = "windows-sys" version = "0.52.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d" dependencies = [ "windows-targets", ] [[package]] name = "windows-sys" version = "0.59.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b" dependencies = [ "windows-targets", ] [[package]] name = "windows-targets" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973" dependencies = [ "windows_aarch64_gnullvm", "windows_aarch64_msvc", "windows_i686_gnu", "windows_i686_gnullvm", "windows_i686_msvc", "windows_x86_64_gnu", "windows_x86_64_gnullvm", "windows_x86_64_msvc", ] [[package]] name = "windows_aarch64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" [[package]] name = "windows_aarch64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" [[package]] name = "windows_i686_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" [[package]] name = "windows_i686_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" [[package]] name = "windows_i686_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" [[package]] name = "windows_x86_64_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" [[package]] name = "windows_x86_64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" [[package]] name = "windows_x86_64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" [[package]] name = "winnow" version = "0.7.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0e7f4ea97f6f78012141bcdb6a216b2609f0979ada50b20ca5b52dde2eac2bb1" dependencies = [ "memchr", ] [[package]] name = "wit-bindgen-rt" version = "0.33.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3268f3d866458b787f390cf61f4bbb563b922d091359f9608842999eaee3943c" dependencies = [ "bitflags", ] [[package]] name = "write16" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936" [[package]] name = "writeable" version = "0.5.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51" [[package]] name = "yoke" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40" dependencies = [ "serde", "stable_deref_trait", "yoke-derive", "zerofrom", ] [[package]] name = "yoke-derive" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154" dependencies = [ "proc-macro2", "quote", "syn", "synstructure", ] [[package]] name = "zerocopy" version = "0.7.35" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0" dependencies = [ "byteorder", "zerocopy-derive", ] [[package]] name = "zerocopy-derive" version = "0.7.35" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "zerofrom" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5" dependencies = [ "zerofrom-derive", ] [[package]] name = "zerofrom-derive" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502" dependencies = [ "proc-macro2", "quote", "syn", "synstructure", ] [[package]] name = "zeroize" version = "1.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde" [[package]] name = "zerovec" version = "0.10.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079" dependencies = [ "yoke", "zerofrom", "zerovec-derive", ] [[package]] name = "zerovec-derive" version = "0.10.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6" dependencies = [ "proc-macro2", "quote", "syn", ] rebuilderd-worker-0.22.1/Cargo.toml0000644000000042670000000000100125550ustar # THIS FILE IS AUTOMATICALLY GENERATED BY CARGO # # When uploading crates to the registry Cargo will automatically # "normalize" Cargo.toml files for maximal compatibility # with all versions of Cargo and also rewrite `path` dependencies # to registry (e.g., crates.io) dependencies. # # If you are reading this file be aware that the original Cargo.toml # will likely look very different (and much more reasonable). # See Cargo.toml.orig for the original contents. [package] edition = "2021" name = "rebuilderd-worker" version = "0.22.1" authors = ["kpcyrd "] build = false autolib = false autobins = false autoexamples = false autotests = false autobenches = false description = "rebuilderd - rebuild worker" readme = "README.md" license = "GPL-3.0-or-later" repository = "https://github.com/kpcyrd/rebuilderd" [package.metadata.deb] assets = [ [ "target/release/rebuilderd-worker", "usr/bin/", "755", ], [ "rebuilder-archlinux.sh", "usr/libexec/rebuilderd/", "755", ], [ "rebuilder-debian.sh", "usr/libexec/rebuilderd/", "755", ], [ "../contrib/confs/rebuilderd-worker.conf", "etc/", "640", ], [ "../contrib/systemd/rebuilderd-worker@.service", "usr/lib/systemd/system/", "640", ], ] depends = "$auto, rebuilderd" [[bin]] name = "rebuilderd-worker" path = "src/main.rs" [dependencies.async-trait] version = "0.1.56" [dependencies.clap] version = "4" features = [ "derive", "env", ] [dependencies.data-encoding] version = "2" [dependencies.env_logger] version = "0.11" [dependencies.futures] version = "0.3.21" [dependencies.futures-util] version = "0.3.21" [dependencies.in-toto] version = "0.4" [dependencies.nix] version = "0.29" features = [ "process", "signal", ] [dependencies.rebuilderd-common] version = "=0.22.1" [dependencies.serde] version = "1.0.137" features = ["derive"] [dependencies.serde_json] version = "1.0.81" [dependencies.tempfile] version = "3.3.0" [dependencies.tokio] version = "1.19.2" features = [ "macros", "rt-multi-thread", "fs", "io-util", "process", "io-std", "time", ] [dependencies.toml] version = "0.8" [dependencies.url] version = "2.2.2" rebuilderd-worker-0.22.1/Cargo.toml.orig000064400000000000000000000022471046102023000162320ustar 00000000000000[package] name = "rebuilderd-worker" version = "0.22.1" description = "rebuilderd - rebuild worker" authors = ["kpcyrd "] license = "GPL-3.0-or-later" repository = "https://github.com/kpcyrd/rebuilderd" edition = "2021" [package.metadata.deb] depends = "$auto, rebuilderd" assets = [ ["target/release/rebuilderd-worker", "usr/bin/", "755"], ["rebuilder-archlinux.sh", "usr/libexec/rebuilderd/", "755"], ["rebuilder-debian.sh", "usr/libexec/rebuilderd/", "755"], ["../contrib/confs/rebuilderd-worker.conf", "etc/", "640"], ["../contrib/systemd/rebuilderd-worker@.service", "usr/lib/systemd/system/", "640"], ] [dependencies] async-trait = "0.1.56" clap = { version = "4", features = ["derive", "env"] } data-encoding = "2" env_logger = "0.11" futures = "0.3.21" futures-util = "0.3.21" in-toto = "0.4" nix = { version = "0.29", features = ["process", "signal"] } rebuilderd-common = { version= "=0.22.1", path="../common" } serde = { version="1.0.137", features=["derive"] } serde_json = "1.0.81" tempfile = "3.3.0" tokio = { version="1.19.2", features=["macros", "rt-multi-thread", "fs", "io-util", "process", "io-std", "time"] } toml = "0.8" url = "2.2.2" rebuilderd-worker-0.22.1/Dockerfile.alpine000064400000000000000000000012101046102023000165710ustar 00000000000000FROM rust:alpine3.21 ENV RUSTFLAGS="-C target-feature=-crt-static" WORKDIR /usr/src/rebuilderd RUN apk add --no-cache musl-dev pkgconfig COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/alpine/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/alpine/target/release/rebuilderd-worker / FROM alpine:3.21 RUN apk add --no-cache libgcc COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=alpine=/usr/local/libexec/rebuilderd/rebuilder-alpine.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.22.1/Dockerfile.archlinux000064400000000000000000000013331046102023000173240ustar 00000000000000FROM archlinux WORKDIR /usr/src/rebuilderd RUN pacman -Suy --noconfirm gcc pkgconf cargo COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/archlinux/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/archlinux/target/release/rebuilderd-worker / FROM archlinux RUN pacman -Suy --noconfirm archlinux-repro COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-archlinux.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=archlinux=/usr/local/libexec/rebuilderd/rebuilder-archlinux.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.22.1/Dockerfile.debian000064400000000000000000000013601046102023000165510ustar 00000000000000FROM rust:bookworm WORKDIR /usr/src/rebuilderd COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/debian/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/debian/target/release/rebuilderd-worker / FROM debian:trixie RUN apt-get update && apt install -y apt-utils debian-keyring devscripts diffoscope dpkg-dev mmdebstrap sbuild uidmap COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-debian.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=debian=/usr/local/libexec/rebuilderd/rebuilder-debian.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.22.1/Dockerfile.fedora000064400000000000000000000012121046102023000165630ustar 00000000000000FROM fedora WORKDIR /usr/src/rebuilderd RUN dnf -y install cargo rust COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/fedora/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/fedora/target/release/rebuilderd-worker / FROM fedora COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-fedora.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=fedora=/usr/local/libexec/rebuilderd/rebuilder-fedora.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.22.1/Dockerfile.tails000064400000000000000000000014711046102023000164460ustar 00000000000000FROM rust:bullseye WORKDIR /usr/src/rebuilderd COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/debian/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/debian/target/release/rebuilderd-worker / FROM debian:bullseye RUN apt-get update && apt-get install -y dpkg-dev sudo \ psmisc git rake libvirt-daemon-system dnsmasq-base ebtables faketime pigz qemu-system-x86 qemu-utils vagrant vagrant-libvirt vmdb2 COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-tails.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=tails=/usr/local/libexec/rebuilderd/rebuilder-tails.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.22.1/README.md000064400000000000000000000024201046102023000146130ustar 00000000000000# Rebuilderd Workers Workers are tasked with, in short, carrying out the actual rebuild. Here you'll find: 1. The rust codebase for the worker daemon (that listens in for rebuild commands) under src/ 2. A series of entrypoints needed by the workers (i.e., rebuilder-{archlinux,debian}) to instantiate new build environments. 3. A series of dockerfiles to build dockerized worker workloads (e.g., in case you would want to use an [autoscaling group in a k8s cluster](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/) or in case you just want to keep workers separated). You can test workers individually by (for example) building a container and scheduling a build (for a debian worker): ```bash $ docker build -t rebuilderd-worker-debian worker/Dockerfile.debian $ docker run --cap-add=SYS_ADMIN --rm \ rebuilderd-worker-debian build debian \ https://buildinfos.debian.net/buildinfo-pool/r/rust-sniffglue/rust-sniffglue_0.11.1-6+b1_amd64.buildinfo ``` | :memo: WARNING | |:---------------------------| | note these commands are run in the root of the repo, not here| | :warning: WARNING | |:---------------------------| | Running Debian workers as containers requires SYS\_ADMIN capabilities which could be dangerous! | rebuilderd-worker-0.22.1/rebuilder-archlinux.sh000075500000000000000000000001201046102023000176360ustar 00000000000000#!/bin/sh set -xe NOCHECK=1 archlinux-repro -o "${REBUILDERD_OUTDIR}" -- "${1}" rebuilderd-worker-0.22.1/rebuilder-debian.sh000075500000000000000000000003041046102023000170670ustar 00000000000000#!/bin/sh set -xe cd "$(dirname "$1")" # for production it's useful to call debrebuild with --cache="$directory" debrebuild --buildresult="${REBUILDERD_OUTDIR}" --builder=sbuild+unshare -- "${1}" rebuilderd-worker-0.22.1/rebuilder-fedora.sh000075500000000000000000000000251046102023000171050ustar 00000000000000#!/bin/sh echo hello rebuilderd-worker-0.22.1/rebuilder-tails.sh000075500000000000000000000026301046102023000167650ustar 00000000000000#!/bin/sh set -eux IMG_PATH="$1" TAG=$(basename "$IMG_PATH" | sed -nr 's/tails-amd64-([0-9a-z~\.]+)\.[^\]+/\1/p' | sed 's/~/-/g') REPO_URL='https://gitlab.tails.boum.org/tails/tails.git' export TAILS_BUILD_OPTIONS="nomergebasebranch forcecleanup" # cleanup possible leftovers virsh vol-list default | awk '{print $1}' | grep ^tails-builder- | xargs -rL1 virsh vol-delete --pool default # setup temporary directory WORK_DIR=$(mktemp -d -t tails.XXXXXX) trap '{ rm -rf -- "$WORK_DIR"; }' EXIT # set the folder public so libvirt user can access it chmod 0711 "$WORK_DIR" # import gpg keys to authenticate source code export HOME="$WORK_DIR/home" mkdir -m 0700 -- "$HOME" # Fetch the latest key over https curl -sSf https://tails.boum.org/tails-signing.key | gpg --import # clone repo REPO_DEST="$WORK_DIR/tails" # doesn't work even with nomergebasebranch #git clone --depth=1 --branch "$TAG" -- "$REPO_URL" "$REPO_DEST" git clone --branch "$TAG" -- "$REPO_URL" "$REPO_DEST" cd "$REPO_DEST" git verify-tag -v -- "$TAG" git submodule update --init # read and export SOURCE_DATE_EPOCH to normalize the build time SOURCE_DATE_EPOCH=$(date --utc --date="$(dpkg-parsechangelog --show-field=Date)" '+%s') export SOURCE_DATE_EPOCH # build the image # libvirtd needs to be started, /var/run/libvirt needs to be mounted if run inside a container ARTIFACTS="$REBUILDERD_OUTDIR" rake build # list build outputs ls -la "$REBUILDERD_OUTDIR" rebuilderd-worker-0.22.1/src/args.rs000064400000000000000000000031121046102023000154240ustar 00000000000000use clap::{ArgAction, Parser}; use std::path::PathBuf; #[derive(Debug, Parser)] #[command(version)] pub struct Args { /// Verbose logging #[arg(short, long, global = true, action(ArgAction::Count))] pub verbose: u8, #[command(subcommand)] pub subcommand: SubCommand, #[arg(short, long)] pub name: Option, #[arg(short, long, global = true, env = "REBUILDERD_WORKER_CONFIG")] pub config: Option, #[arg(long = "backend", global = true, env = "REBUILDERD_WORKER_BACKEND")] pub backends: Vec, } #[derive(Debug, Parser)] pub enum SubCommand { /// Rebuild an individual package Build(Build), /// Connect to a central rebuilderd daemon for work Connect(Connect), /// Invoke diffoscope similar to how a rebuilder would invoke it Diffoscope(Diffoscope), /// Load and print a config CheckConfig, } #[derive(Debug, Parser)] pub struct Build { /// Selects the right build profile from the configuration pub distro: String, /// The pre-built artifact that should be reproduced pub artifact_url: String, /// Pass a different input file to the rebuilder backend #[arg(long)] pub input_url: Option, /// Use a specific rebuilder script instead of the default #[arg(long)] pub script_location: Option, /// Use diffoscope to generate a diff #[arg(long)] pub gen_diffoscope: bool, } #[derive(Debug, Parser)] pub struct Connect { pub endpoint: Option, } #[derive(Debug, Parser)] pub struct Diffoscope { pub a: PathBuf, pub b: PathBuf, } rebuilderd-worker-0.22.1/src/auth.rs000064400000000000000000000036721046102023000154440ustar 00000000000000use data_encoding::BASE64; use in_toto::crypto::{KeyType, PrivateKey, SignatureScheme}; use rebuilderd_common::api::Client; use rebuilderd_common::config::ConfigFile; use rebuilderd_common::errors::*; use std::fs; use std::fs::OpenOptions; use std::io::prelude::*; use std::io::ErrorKind; use std::os::unix::fs::OpenOptionsExt; use std::path::Path; pub struct Profile { pub pubkey: String, pub privkey: PrivateKey, } impl Profile { pub fn new_client( &self, config: ConfigFile, endpoint: String, signup_secret: Option, auth_cookie: Option, ) -> Result { let mut client = Client::new(config, Some(endpoint))?; client.worker_key(self.pubkey.clone()); if let Some(signup_secret) = signup_secret { client.signup_secret(signup_secret); } else if let Some(auth_cookie) = auth_cookie { client.auth_cookie(auth_cookie); } Ok(client) } } #[inline] pub fn load() -> Result { match fs::remove_file("rebuilder.key") { Ok(_) => info!("Deleted old v1 worker key"), Err(err) if err.kind() == ErrorKind::NotFound => (), Err(err) => warn!("Failed to delete old v1 worker key: {:#}", err), } load_key("rebuilder.v2.key") } fn load_key>(path: P) -> Result { let path = path.as_ref(); let privkey = if path.exists() { let content = fs::read(path)?; PrivateKey::from_pkcs8(&content, SignatureScheme::Ed25519)? } else { let sk = PrivateKey::new(KeyType::Ed25519)?; let mut file = OpenOptions::new() .mode(0o640) .write(true) .create(true) .open(path)?; file.write_all(&sk[..])?; PrivateKey::from_pkcs8(&sk, SignatureScheme::Ed25519)? }; let pk = privkey.public(); let pubkey = BASE64.encode(pk.as_bytes()); Ok(Profile { pubkey, privkey }) } rebuilderd-worker-0.22.1/src/config.rs000064400000000000000000000042201046102023000157360ustar 00000000000000use crate::args::Args; use rebuilderd_common::errors::*; use serde::{Deserialize, Serialize}; use std::collections::HashMap; use std::fs; use std::path::PathBuf; #[derive(Debug, Default, Serialize, Deserialize)] pub struct ConfigFile { pub endpoint: Option, pub signup_secret: Option, #[serde(default)] pub build: Build, #[serde(default)] pub diffoscope: Diffoscope, #[serde(default, rename = "backend")] pub backends: HashMap, } #[derive(Debug, Default, Clone, Serialize, Deserialize)] pub struct Build { pub timeout: Option, pub max_bytes: Option, #[serde(default)] pub silent: bool, } #[derive(Debug, Default, Clone, Serialize, Deserialize)] pub struct Diffoscope { #[serde(default)] pub enabled: bool, #[serde(default)] pub args: Vec, pub timeout: Option, pub max_bytes: Option, } #[derive(Debug, Clone, Serialize, Deserialize)] pub struct Backend { pub path: PathBuf, } pub fn load(args: &Args) -> Result { let path = if let Some(path) = args.config.as_ref() { Some(path.to_owned()) } else { let path = PathBuf::from("/etc/rebuilderd-worker.conf"); if path.exists() { warn!("Using the implicit `-c /etc/rebuilderd-worker.conf` is going to be removed in the future"); Some(path) } else { None } }; let mut conf = if let Some(path) = path { info!("Loading configuration from {:?}", path); let buf = fs::read_to_string(&path).with_context(|| anyhow!("Failed to open {:?}", path))?; toml::from_str::(&buf)? } else { info!("Using default configuration"); ConfigFile::default() }; for backend in &args.backends { debug!("Adding to list of supported backends: {:?}", backend); let (key, path) = backend.split_once('=').ok_or_else(|| { anyhow!("Invalid argument, expected format is --backend distro=/path/to/script") })?; conf.backends .insert(key.into(), Backend { path: path.into() }); } Ok(conf) } rebuilderd-worker-0.22.1/src/diffoscope.rs000064400000000000000000000016171046102023000166210ustar 00000000000000use crate::config; use crate::proc; use rebuilderd_common::errors::*; use std::collections::HashMap; use std::ffi::OsString; use std::path::Path; use std::time::Duration; pub async fn diffoscope(a: &Path, b: &Path, settings: &config::Diffoscope) -> Result { let mut args = settings.args.iter().map(OsString::from).collect::>(); args.push("--".into()); args.push(a.into()); args.push(b.into()); let timeout = settings.timeout.unwrap_or(3600); // 1h let opts = proc::Options { timeout: Duration::from_secs(timeout), size_limit: settings.max_bytes, kill_at_size_limit: true, passthrough: false, envs: HashMap::new(), }; let bin = Path::new("diffoscope"); let mut output = Vec::new(); proc::run(bin, &args, opts, &mut output).await?; let output = String::from_utf8_lossy(&output); Ok(output.into_owned()) } rebuilderd-worker-0.22.1/src/download.rs000064400000000000000000000024131046102023000163020ustar 00000000000000use futures_util::StreamExt; use rebuilderd_common::errors::*; use rebuilderd_common::http; use std::path::{Path, PathBuf}; use tokio::fs::File; use tokio::io::AsyncWriteExt; use url::Url; pub async fn download(url_str: &str, path: &Path) -> Result { let url = url_str .parse::() .context("Failed to parse input as url")?; let filename = url .path_segments() .ok_or_else(|| format_err!("Url doesn't seem to have a path"))? .last() .ok_or_else(|| format_err!("Failed to get filename from path"))? .to_owned(); if filename.is_empty() { bail!("Filename detected from url is empty"); } let target = path.join(&filename); info!("Downloading {:?} to {:?}", url_str, target); let client = http::client()?; let mut stream = client .get(url) .send() .await? .error_for_status()? .bytes_stream(); let mut f = File::create(&target) .await .context("Failed to create output file")?; let mut bytes = 0; while let Some(item) = stream.next().await { let item = item?; f.write_all(&item).await?; bytes += item.len(); } info!("Downloaded {} bytes", bytes); Ok(PathBuf::from(filename)) } rebuilderd-worker-0.22.1/src/heartbeat.rs000064400000000000000000000003161046102023000164320ustar 00000000000000use async_trait::async_trait; use rebuilderd_common::errors::*; use std::time::Duration; #[async_trait] pub trait HeartBeat { fn interval(&self) -> Duration; async fn ping(&self) -> Result<()>; } rebuilderd-worker-0.22.1/src/main.rs000064400000000000000000000201341046102023000154170ustar 00000000000000#![recursion_limit = "256"] use crate::args::{Args, SubCommand}; use crate::rebuild::Context; use async_trait::async_trait; use clap::Parser; use env_logger::Env; use in_toto::crypto::PrivateKey; use rebuilderd_common::api::*; use rebuilderd_common::auth::find_auth_cookie; use rebuilderd_common::config::*; use rebuilderd_common::errors::Context as _; use rebuilderd_common::errors::*; use rebuilderd_common::PkgArtifact; use std::fs; use std::io::{self, Write}; use std::path::Path; use std::time::Duration; use tokio::time; pub mod args; pub mod auth; pub mod config; pub mod diffoscope; pub mod download; pub mod heartbeat; pub mod proc; pub mod rebuild; pub mod setup; pub struct HttpHeartBeat<'a> { client: &'a Client, queue_id: i32, } #[async_trait] impl heartbeat::HeartBeat for HttpHeartBeat<'_> { fn interval(&self) -> Duration { Duration::from_secs(PING_INTERVAL) } async fn ping(&self) -> Result<()> { if let Err(err) = self .client .ping_build(&PingRequest { queue_id: self.queue_id, }) .await { warn!("Failed to ping: {}", err); } Ok(()) } } async fn rebuild(client: &Client, privkey: &PrivateKey, config: &config::ConfigFile) -> Result<()> { info!("Requesting work from rebuilderd..."); let supported_backends = config.backends.keys().map(String::from).collect::>(); match client.pop_queue(&WorkQuery { supported_backends }).await? { JobAssignment::Nothing => { info!("No pending tasks, sleeping for {}s...", IDLE_DELAY); time::sleep(Duration::from_secs(IDLE_DELAY)).await; } JobAssignment::Rebuild(rb) => { info!( "Starting rebuild of {:?} {:?}", rb.pkgbase.name, rb.pkgbase.version ); let backend = config .backends .get(&rb.pkgbase.distro) .cloned() .ok_or_else(|| anyhow!("No backend for {:?} configured", rb.pkgbase.distro))?; let ctx = Context { artifacts: rb.pkgbase.artifacts.clone(), input_url: rb.pkgbase.input_url.clone(), backend, build: config.build.clone(), diffoscope: config.diffoscope.clone(), privkey, }; let hb = HttpHeartBeat { client, queue_id: rb.id, }; let mut log = Vec::new(); let rebuilds = match rebuild::rebuild_with_heartbeat(&ctx, &mut log, &hb).await { Ok(res) => res, Err(err) => { error!( "Unexpected error while rebuilding package package: {:#}", err ); let msg = format!( "rebuilderd: unexpected error while rebuilding package: {:#}\n", err ); if !log.is_empty() { log.extend(b"\n\n"); } log.extend(msg.as_bytes()); let mut res = vec![]; for artifact in &rb.pkgbase.artifacts { res.push((artifact.clone(), Rebuild::new(BuildStatus::Fail))); } res } }; let build_log = String::from_utf8_lossy(&log).into_owned(); let report = BuildReport { queue: *rb, build_log, rebuilds, }; info!("Sending build report to rebuilderd..."); client .report_build(&report) .await .context("Failed to POST to rebuilderd")?; } } Ok(()) } async fn run_worker_loop( client: &Client, privkey: &PrivateKey, config: &config::ConfigFile, ) -> Result<()> { loop { if let Err(err) = rebuild(client, privkey, config).await { error!( "Unexpected error, sleeping for {}s: {:#}", API_ERROR_DELAY, err ); time::sleep(Duration::from_secs(API_ERROR_DELAY)).await; } let restart_flag = Path::new("rebuilderd.restart"); if restart_flag.exists() { info!("Restart flag exists, initiating shutdown"); if let Err(err) = fs::remove_file(restart_flag) { error!("Failed to remove restart flag: {:#}", err); } return Ok(()); } time::sleep(Duration::from_secs(WORKER_DELAY)).await; } } #[tokio::main] async fn main() -> Result<()> { let args = Args::parse(); let logging = match args.verbose { 0 => "info", 1 => "debug", _ => "trace", }; env_logger::init_from_env(Env::default().default_filter_or(logging)); let config = config::load(&args).context("Failed to load config file")?; let cookie = find_auth_cookie().ok(); if cookie.is_some() { debug!("Successfully loaded auth cookie"); } if let Some(name) = args.name { setup::run(&name).context("Failed to setup worker")?; } let profile = auth::load()?; match args.subcommand { SubCommand::Connect(connect) => { let system_config = rebuilderd_common::config::load(None::) .context("Failed to load system config")?; let endpoint = if let Some(endpoint) = connect.endpoint { endpoint } else { config .endpoint .clone() .ok_or_else(|| format_err!("No endpoint configured"))? }; let client = profile.new_client( system_config, endpoint, config.signup_secret.clone(), cookie, )?; run_worker_loop(&client, &profile.privkey, &config).await?; } // this is only really for debugging SubCommand::Build(build) => { let backend = if let Some(script_location) = build.script_location { config::Backend { path: script_location, } } else { config .backends .get(&build.distro) .cloned() .ok_or_else(|| anyhow!("No backend configured in config file"))? }; let diffoscope = config::Diffoscope { enabled: build.gen_diffoscope, ..Default::default() }; let mut log = Vec::new(); let res = rebuild::rebuild( &Context { artifacts: vec![PkgArtifact { name: "anonymous".to_string(), version: "0.0.0".to_string(), url: build.artifact_url, }], input_url: build.input_url, backend, build: config.build, diffoscope, privkey: &profile.privkey, }, &mut log, ) .await?; for (artifact, res) in res { trace!("rebuild result object for {:?} is {:?}", artifact, res); if res.status == BuildStatus::Good { info!("Package verified successfully"); } else { error!("Package failed to verify"); if let Some(diffoscope) = res.diffoscope { io::stdout().write_all(diffoscope.as_bytes()).ok(); } } } } SubCommand::Diffoscope(diffoscope) => { let output = diffoscope::diffoscope(&diffoscope.a, &diffoscope.b, &config.diffoscope).await?; print!("{}", output); } SubCommand::CheckConfig => { let json = serde_json::to_string_pretty(&config)?; println!("{}", json); } } Ok(()) } rebuilderd-worker-0.22.1/src/proc.rs000064400000000000000000000261211046102023000154400ustar 00000000000000use futures_util::FutureExt; use nix::sys::signal::{self, Signal}; use nix::unistd::Pid; use rebuilderd_common::errors::*; use std::cmp; use std::collections::HashMap; use std::ffi::OsStr; use std::fmt; use std::path::Path; use std::process::Stdio; use std::time::{Duration, Instant}; use tokio::io::{AsyncReadExt, AsyncWriteExt}; use tokio::process::{Child, Command}; use tokio::select; use tokio::time; const SIGKILL_DELAY: u64 = 10; pub struct Options { pub timeout: Duration, pub size_limit: Option, pub kill_at_size_limit: bool, pub passthrough: bool, pub envs: HashMap, } pub struct Capture<'a> { output: &'a mut Vec, timeout: Duration, size_limit: Option, kill_at_size_limit: bool, start: Instant, sigterm_sent: Option, truncated: bool, } pub fn capture(output: &mut Vec, opts: Options) -> Capture<'_> { let start = Instant::now(); Capture { output, timeout: opts.timeout, size_limit: opts.size_limit, kill_at_size_limit: opts.kill_at_size_limit, start, sigterm_sent: None, truncated: false, } } impl Capture<'_> { pub async fn push_bytes(&mut self, child: &mut Child, mut slice: &[u8]) -> Result<()> { if !self.truncated { if let Some(size_limit) = &self.size_limit { let n = cmp::min(size_limit - self.output.len(), slice.len()); if n < 1 { warn!( "Exceeding output limit: output={}, slice={}, limit={}", self.output.len(), slice.len(), size_limit ); let msg = format!("TRUNCATED DUE TO SIZE LIMIT: {} bytes", size_limit); self.truncate(child, &msg, self.kill_at_size_limit).await?; return Ok(()); } else { // truncate to stay within the limit slice = &slice[..n]; } } self.output.extend(slice); } Ok(()) } fn kill(pid: u32, signal: Signal) -> Result<()> { // convert 1234 to -1234 to kill grand-children too let pid = -(pid as i32); info!("Sending {} to child(pid={})", signal, pid); signal::kill(Pid::from_raw(pid), signal)?; Ok(()) } async fn truncate(&mut self, child: &mut Child, reason: &str, kill: bool) -> Result<()> { if kill { if let Some(pid) = child.id() { Self::kill(pid, Signal::SIGTERM)?; } self.sigterm_sent = Some(Instant::now()); } self.output.extend(format!("\n\n{}\n\n", reason).as_bytes()); self.truncated = true; Ok(()) } pub async fn next_wakeup( &mut self, child: &mut Child, stdout_open: &mut bool, stderr_open: &mut bool, ) -> Result { // check if we need to SIGKILL due to SIGTERM timeout if let Some(sigterm_sent) = self.sigterm_sent { if sigterm_sent.elapsed() > Duration::from_secs(SIGKILL_DELAY) { if let Some(pid) = child.id() { warn!( "child(pid={}) didn't terminate {}s after SIGTERM, sending SIGKILL", pid, SIGKILL_DELAY ); // child.id is going to return None after this Self::kill(pid, Signal::SIGKILL)?; *stdout_open = false; *stderr_open = false; } } } // check if the process timed out and we need to SIGTERM if let Some(remaining) = self.timeout.checked_sub(self.start.elapsed()) { return Ok(remaining); } else if self.sigterm_sent.is_none() { // the process has timed out, sending SIGTERM warn!("child timed out, killing..."); let msg = format!( "TRUNCATED DUE TO TIMEOUT: {} seconds", self.timeout.as_secs() ); self.truncate(child, &msg, true).await?; } // if we don't need any timeouts anymore we just return any value Ok(Duration::from_secs(SIGKILL_DELAY)) } } pub async fn run(bin: &Path, args: I, opts: Options, log: &mut Vec) -> Result where I: IntoIterator + fmt::Debug, S: AsRef, { info!("Running {:?} {:?}", bin, args); let mut cmd = Command::new(bin); cmd.args(args) .stdin(Stdio::null()) .stdout(Stdio::piped()) .stderr(Stdio::piped()) .envs(&opts.envs); unsafe { cmd.pre_exec(|| { // create a new process group let pid = nix::unistd::getpid(); if let Err(err) = nix::unistd::setpgid(pid, Pid::from_raw(0)) { warn!("Failed to create new process group: {:#?}", err); } Ok(()) }); } let mut child = cmd.spawn()?; let mut child_stdout = child.stdout.take().unwrap(); let mut child_stderr = child.stderr.take().unwrap(); let mut buf_stdout = [0u8; 4096]; let mut buf_stderr = [0u8; 4096]; let mut stdout = tokio::io::stdout(); let mut stderr = tokio::io::stderr(); let passthrough = opts.passthrough; let mut stdout_open = true; let mut stderr_open = true; let mut cap = capture(log, opts); let success = loop { let remaining = cap .next_wakeup(&mut child, &mut stdout_open, &mut stderr_open) .await?; if stdout_open || stderr_open { select! { n = child_stdout.read(&mut buf_stdout).fuse() => { let n = n?; trace!("read stdout: {}", n); if n == 0 { stdout_open = false; } else { cap.push_bytes(&mut child, &buf_stdout[..n]).await?; if passthrough { stdout.write_all(&buf_stdout[..n]).await?; } } }, n = child_stderr.read(&mut buf_stderr).fuse() => { let n = n?; trace!("read stderr: {}", n); if n == 0 { stderr_open = false; } else { cap.push_bytes(&mut child, &buf_stderr[..n]).await?; if passthrough { stderr.write_all(&buf_stderr[..n]).await?; } } }, _ = time::sleep(remaining).fuse() => continue, } } else { select! { status = child.wait().fuse() => { let status = status?; info!("{:?} exited with exit={}, captured {} bytes", bin, status, log.len()); break status.success(); } _ = time::sleep(remaining).fuse() => continue, } } }; Ok(success) } #[cfg(test)] mod tests { use super::*; async fn script(script: &str, opts: Options) -> Result<(bool, String, Duration)> { let start = Instant::now(); let path = Path::new("sh"); let mut output = Vec::new(); let success = run(path, &["-c", script], opts, &mut output).await?; let duration = start.elapsed(); let output = String::from_utf8_lossy(&output).into_owned(); Ok((success, output, duration)) } #[tokio::test] async fn hello_world() { let (success, output, _) = script( "/bin/echo hello world", Options { timeout: Duration::from_secs(600), size_limit: None, kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(success); assert_eq!(output, "hello world\n"); } #[tokio::test] async fn size_limit_no_kill() { let (success, output, _) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA done ", Options { timeout: Duration::from_secs(600), size_limit: Some(50), kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n"); } #[tokio::test] async fn size_limit_kill() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 0.5 done ", Options { timeout: Duration::from_secs(600), size_limit: Some(50), kill_at_size_limit: true, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(5)); } #[tokio::test] async fn timeout() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 1 done ", Options { timeout: Duration::from_millis(1500), size_limit: None, kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO TIMEOUT: 1 seconds\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(3)); } #[tokio::test] async fn size_limit_no_kill_but_timeout() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 0.1 done ", Options { timeout: Duration::from_millis(1500), size_limit: Some(50), kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n\n\nTRUNCATED DUE TO TIMEOUT: 1 seconds\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(2)); } } rebuilderd-worker-0.22.1/src/rebuild.rs000064400000000000000000000221261046102023000161240ustar 00000000000000use crate::config; use crate::diffoscope::diffoscope; use crate::download::download; use crate::heartbeat::HeartBeat; use crate::proc; use in_toto::crypto::PrivateKey; use in_toto::runlib::in_toto_run; use rebuilderd_common::api::{BuildStatus, Rebuild}; use rebuilderd_common::errors::Context as _; use rebuilderd_common::errors::*; use rebuilderd_common::PkgArtifact; use std::collections::HashMap; use std::fs; use std::io::ErrorKind; use std::path::Path; use std::time::Duration; use tokio::fs::File; use tokio::io::AsyncReadExt; use tokio::select; use tokio::time; pub struct Context<'a> { pub artifacts: Vec, pub input_url: Option, pub backend: config::Backend, pub build: config::Build, pub diffoscope: config::Diffoscope, pub privkey: &'a PrivateKey, } fn path_to_string(path: &Path) -> Result { let s = path .to_str() .with_context(|| anyhow!("Path contains invalid characters: {:?}", path))?; Ok(s.to_string()) } pub async fn compare_files(a: &Path, b: &Path) -> Result { let mut buf1 = [0u8; 4096]; let mut buf2 = [0u8; 4096]; info!("Comparing {:?} with {:?}", a, b); let mut f1 = File::open(a) .await .with_context(|| anyhow!("Failed to open {:?}", a))?; let mut f2 = File::open(b) .await .with_context(|| anyhow!("Failed to open {:?}", b))?; let mut pos = 0; loop { // read up to 4k bytes from the first file let n = f1.read_buf(&mut &mut buf1[..]).await?; // check if the first file is end-of-file if n == 0 { debug!("First file is at end-of-file"); // check if other file is eof too let n = f2.read_buf(&mut &mut buf2[..]).await?; if n > 0 { info!("Files are not identical, {:?} is longer", b); return Ok(false); } else { return Ok(true); } } // check the same chunk in the other file match f2.read_exact(&mut buf2[..n]).await { Ok(n) => n, Err(err) if err.kind() == ErrorKind::UnexpectedEof => { info!("Files are not identical, {:?} is shorter", b); return Ok(false); } err => err?, }; if buf1[..n] != buf2[..n] { // get the exact position // this can't panic because we've already checked the slices are not equal let pos = pos + buf1[..n] .iter() .zip(buf2[..n].iter()) .position(|(a, b)| a != b) .unwrap(); info!("Files {:?} and {:?} differ at position {}", a, b, pos); return Ok(false); } // advance the number of bytes that are equal pos += n; } } pub async fn rebuild_with_heartbeat( ctx: &Context<'_>, log: &mut Vec, hb: &dyn HeartBeat, ) -> Result> { let mut rebuild = Box::pin(rebuild(ctx, log)); loop { select! { res = &mut rebuild => { return res; }, _ = time::sleep(hb.interval()) => hb.ping().await?, } } } pub async fn rebuild(ctx: &Context<'_>, log: &mut Vec) -> Result> { // setup let tmp = tempfile::Builder::new().prefix("rebuilderd").tempdir()?; let inputs_dir = tmp.path().join("inputs"); fs::create_dir(&inputs_dir).context("Failed to create inputs/ temp dir")?; let out_dir = tmp.path().join("out"); fs::create_dir(&out_dir).context("Failed to create out/ temp dir")?; // download let mut artifacts = Vec::new(); for artifact in &ctx.artifacts { let artifact_filename = download(&artifact.url, &inputs_dir) .await .with_context(|| { anyhow!( "Failed to download original package from {:?}", artifact.url ) })?; let artifact_path = inputs_dir.join(&artifact_filename); artifacts.push((artifact.clone(), artifact_filename, artifact_path)); } let input_filename = if let Some(input_url) = &ctx.input_url { download(input_url, &inputs_dir) .await .with_context(|| anyhow!("Failed to download build input from {:?}", input_url))? } else { artifacts .first() .context("Failed to use first artifact as build input")? .1 .to_owned() }; let input_path = inputs_dir.join(&input_filename); // rebuild verify(ctx, log, &out_dir, &input_path).await?; // process results let mut results = Vec::new(); for (artifact, artifact_filename, artifact_path) in artifacts { let output_path = out_dir.join(&artifact_filename); let result = if !output_path.exists() { info!( "No output artifact found, marking as BAD: {:?}", output_path ); Rebuild::new(BuildStatus::Bad) } else if compare_files(&artifact_path, &output_path).await? { info!( "Output artifacts is identical, marking as GOOD: {:?}", output_path ); let mut res = Rebuild::new(BuildStatus::Good); info!("Generating signed link"); match in_toto_run( &format!("rebuild {}", artifact_filename.to_str().unwrap()), None, &[input_path .to_str() .ok_or_else(|| anyhow!("Input path contains invalid characters"))?], &[output_path .to_str() .ok_or_else(|| anyhow!("Output path contains invalid characters"))?], &[], Some(ctx.privkey), Some(&["sha512", "sha256"]), Some(&[ &format!("{}/", inputs_dir.to_str().unwrap()), &format!("{}/", out_dir.to_str().unwrap()), ]), ) { Ok(signed_link) => { info!("Signed link generated"); let attestation = serde_json::to_string(&signed_link) .context("Failed to serialize attestation")?; res.attestation = Some(attestation); } Err(err) => warn!("Failed to generate in-toto attestation: {:#?}", err), } res } else { info!("Output artifact differs, marking as BAD: {:?}", output_path); let mut res = Rebuild::new(BuildStatus::Bad); // generate diffoscope diff if enabled if ctx.diffoscope.enabled { let diff = diffoscope(&artifact_path, &output_path, &ctx.diffoscope) .await .context("Failed to run diffoscope")?; res.diffoscope = Some(diff); } res }; results.push((artifact, result)); } Ok(results) } async fn verify( ctx: &Context<'_>, log: &mut Vec, out_dir: &Path, input_path: &Path, ) -> Result<()> { let bin = &ctx.backend.path; let timeout = ctx.build.timeout.unwrap_or(3600 * 24); // 24h let mut envs = HashMap::new(); envs.insert("REBUILDERD_OUTDIR".into(), path_to_string(out_dir)?); let opts = proc::Options { timeout: Duration::from_secs(timeout), size_limit: ctx.build.max_bytes, kill_at_size_limit: false, passthrough: !ctx.build.silent, envs, }; proc::run(bin.as_ref(), &[input_path], opts, log).await?; Ok(()) } #[cfg(test)] mod tests { use super::*; #[tokio::test] async fn compare_files_equal() { let equal = compare_files(Path::new("src/main.rs"), Path::new("src/main.rs")) .await .unwrap(); assert!(equal); } #[tokio::test] async fn compare_files_not_equal1() { let equal = compare_files(Path::new("src/main.rs"), Path::new("Cargo.toml")) .await .unwrap(); assert!(!equal); } #[tokio::test] async fn compare_files_not_equal2() { let equal = compare_files(Path::new("Cargo.toml"), Path::new("src/main.rs")) .await .unwrap(); assert!(!equal); } #[tokio::test] async fn compare_large_files_equal() { let dir = tempfile::tempdir().unwrap(); fs::write(dir.path().join("a"), [0u8; 4096 * 100]).unwrap(); fs::write(dir.path().join("b"), [0u8; 4096 * 100]).unwrap(); let equal = compare_files(&dir.path().join("a"), &dir.path().join("b")) .await .unwrap(); assert!(equal); } #[tokio::test] async fn compare_large_files_not_equal() { let dir = tempfile::tempdir().unwrap(); fs::write(dir.path().join("a"), [0u8; 4096 * 100]).unwrap(); fs::write(dir.path().join("b"), [1u8; 4096 * 100]).unwrap(); let equal = compare_files(&dir.path().join("a"), &dir.path().join("b")) .await .unwrap(); assert!(!equal); } } rebuilderd-worker-0.22.1/src/setup.rs000064400000000000000000000004731046102023000156370ustar 00000000000000use rebuilderd_common::errors::*; use std::env; use std::fs; pub fn run(name: &str) -> Result<()> { let work_dir = format!("/var/lib/rebuilderd-worker/{}", name); info!("switching into work directory: {}", work_dir); fs::create_dir_all(&work_dir)?; env::set_current_dir(&work_dir)?; Ok(()) }