rebuilderd-worker-0.24.0/.cargo_vcs_info.json0000644000000001440000000000100145460ustar { "git": { "sha1": "b4be10fac0e32a5f1ea5966972d02d50d0292ca0" }, "path_in_vcs": "worker" }rebuilderd-worker-0.24.0/.dockerignore000064400000000000000000000000531046102023000160110ustar 00000000000000build cache rebuilder.key rebuilder.v2.key rebuilderd-worker-0.24.0/Cargo.lock0000644000001640060000000000100125310ustar # This file is automatically @generated by Cargo. # It is not intended for manual editing. version = 4 [[package]] name = "addr2line" version = "0.24.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1" dependencies = [ "gimli", ] [[package]] name = "adler2" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627" [[package]] name = "aho-corasick" version = "1.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916" dependencies = [ "memchr", ] [[package]] name = "android-tzdata" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e999941b234f3131b00bc13c22d06e8c5ff726d1b6318ac7eb276997bbb4fef0" [[package]] name = "android_system_properties" version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311" dependencies = [ "libc", ] [[package]] name = "anstream" version = "0.6.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b" dependencies = [ "anstyle", "anstyle-parse", "anstyle-query", "anstyle-wincon", "colorchoice", "is_terminal_polyfill", "utf8parse", ] [[package]] name = "anstyle" version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9" [[package]] name = "anstyle-parse" version = "0.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9" dependencies = [ "utf8parse", ] [[package]] name = "anstyle-query" version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "anstyle-wincon" version = "3.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e" dependencies = [ "anstyle", "once_cell", "windows-sys 0.59.0", ] [[package]] name = "anyhow" version = "1.0.98" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e16d2d3311acee920a9eb8d33b8cbc1787ce4a264e85f964c2404b969bdcd487" [[package]] name = "async-trait" version = "0.1.88" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e539d3fca749fcee5236ab05e93a52867dd549cc157c8cb7f99595f3cedffdb5" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "autocfg" version = "1.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26" [[package]] name = "backtrace" version = "0.3.74" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8d82cb332cdfaed17ae235a638438ac4d4839913cc2af585c3c6746e8f8bee1a" dependencies = [ "addr2line", "cfg-if", "libc", "miniz_oxide", "object", "rustc-demangle", "windows-targets 0.52.6", ] [[package]] name = "base64" version = "0.22.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" [[package]] name = "bitflags" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd" [[package]] name = "bumpalo" version = "3.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf" [[package]] name = "bytes" version = "1.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a" [[package]] name = "cc" version = "1.2.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8691782945451c1c383942c4874dbe63814f61cb57ef773cda2972682b7bb3c0" dependencies = [ "shlex", ] [[package]] name = "cfg-if" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd" [[package]] name = "cfg_aliases" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724" [[package]] name = "chrono" version = "0.4.41" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c469d952047f47f91b68d1cba3f10d63c11d73e4636f24f08daf0278abf01c4d" dependencies = [ "android-tzdata", "iana-time-zone", "js-sys", "num-traits", "serde", "wasm-bindgen", "windows-link", ] [[package]] name = "clap" version = "4.5.37" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eccb054f56cbd38340b380d4a8e69ef1f02f1af43db2f0cc817a4774d80ae071" dependencies = [ "clap_builder", "clap_derive", ] [[package]] name = "clap_builder" version = "4.5.37" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "efd9466fac8543255d3b1fcad4762c5e116ffe808c8a3043d4263cd4fd4862a2" dependencies = [ "anstream", "anstyle", "clap_lex", "strsim", ] [[package]] name = "clap_derive" version = "4.5.32" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09176aae279615badda0765c0c0b3f6ed53f4709118af73cf4655d85d1530cd7" dependencies = [ "heck", "proc-macro2", "quote", "syn", ] [[package]] name = "clap_lex" version = "0.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6" [[package]] name = "colorchoice" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990" [[package]] name = "colored" version = "3.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fde0e0ec90c9dfb3b4b1a0891a7dcd0e2bffde2f7efed5fe7c9bb00e5bfb915e" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "core-foundation" version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b55271e5c8c478ad3f38ad24ef34923091e0548492a266d19b3c0b4d82574c63" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "core-foundation-sys" version = "0.8.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b" [[package]] name = "data-encoding" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2a2330da5de22e8a3cb63252ce2abb30116bf5265e89c0e01bc17015ce30a476" [[package]] name = "derp" version = "0.0.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c9b84cfd9b6fa437e498215e5625e9e3ae3bf9bb54d623028a181c40820db169" dependencies = [ "untrusted 0.7.1", ] [[package]] name = "dirs-next" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b98cf8ebf19c3d1b223e151f99a4f9f0690dca41414773390fc824184ac833e1" dependencies = [ "cfg-if", "dirs-sys-next", ] [[package]] name = "dirs-sys-next" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4ebda144c4fe02d1f7ea1a7d9641b6fc6b580adcfa024ae48797ecdeb6825b4d" dependencies = [ "libc", "redox_users", "winapi", ] [[package]] name = "displaydoc" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "env_filter" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0" dependencies = [ "log", "regex", ] [[package]] name = "env_logger" version = "0.11.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c863f0904021b108aa8b2f55046443e6b1ebde8fd4a15c399893aae4fa069f" dependencies = [ "anstream", "anstyle", "env_filter", "jiff", "log", ] [[package]] name = "equivalent" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "errno" version = "0.3.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "976dd42dc7e85965fe702eb8164f21f450704bdde31faefd6471dba214cb594e" dependencies = [ "libc", "windows-sys 0.59.0", ] [[package]] name = "fastrand" version = "2.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be" [[package]] name = "fnv" version = "1.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1" [[package]] name = "form_urlencoded" version = "1.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456" dependencies = [ "percent-encoding", ] [[package]] name = "futures" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876" dependencies = [ "futures-channel", "futures-core", "futures-executor", "futures-io", "futures-sink", "futures-task", "futures-util", ] [[package]] name = "futures-channel" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10" dependencies = [ "futures-core", "futures-sink", ] [[package]] name = "futures-core" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e" [[package]] name = "futures-executor" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f" dependencies = [ "futures-core", "futures-task", "futures-util", ] [[package]] name = "futures-io" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6" [[package]] name = "futures-macro" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "futures-sink" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7" [[package]] name = "futures-task" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988" [[package]] name = "futures-util" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81" dependencies = [ "futures-channel", "futures-core", "futures-io", "futures-macro", "futures-sink", "futures-task", "memchr", "pin-project-lite", "pin-utils", "slab", ] [[package]] name = "getrandom" version = "0.2.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592" dependencies = [ "cfg-if", "js-sys", "libc", "wasi 0.11.0+wasi-snapshot-preview1", "wasm-bindgen", ] [[package]] name = "getrandom" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "73fea8450eea4bac3940448fb7ae50d91f034f941199fcd9d909a5a07aa455f0" dependencies = [ "cfg-if", "js-sys", "libc", "r-efi", "wasi 0.14.2+wasi-0.2.4", "wasm-bindgen", ] [[package]] name = "gimli" version = "0.31.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f" [[package]] name = "glob" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8d1add55171497b4705a648c6b583acafb01d58050a51727785f0b2c8e0a2b2" [[package]] name = "hashbrown" version = "0.15.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "84b26c544d002229e640969970a2e74021aadf6e2f96372b9c58eff97de08eb3" [[package]] name = "heck" version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" [[package]] name = "http" version = "1.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f4a85d31aea989eead29a3aaf9e1115a180df8282431156e533de47660892565" dependencies = [ "bytes", "fnv", "itoa", ] [[package]] name = "http-body" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184" dependencies = [ "bytes", "http", ] [[package]] name = "http-body-util" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a" dependencies = [ "bytes", "futures-core", "http", "http-body", "pin-project-lite", ] [[package]] name = "httparse" version = "1.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87" [[package]] name = "hyper" version = "1.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80" dependencies = [ "bytes", "futures-channel", "futures-util", "http", "http-body", "httparse", "itoa", "pin-project-lite", "smallvec", "tokio", "want", ] [[package]] name = "hyper-rustls" version = "0.27.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2d191583f3da1305256f22463b9bb0471acad48a4e534a5218b9963e9c1f59b2" dependencies = [ "futures-util", "http", "hyper", "hyper-util", "rustls", "rustls-native-certs", "rustls-pki-types", "tokio", "tokio-rustls", "tower-service", ] [[package]] name = "hyper-util" version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "497bbc33a26fdd4af9ed9c70d63f61cf56a938375fbb32df34db9b1cd6d643f2" dependencies = [ "bytes", "futures-channel", "futures-util", "http", "http-body", "hyper", "libc", "pin-project-lite", "socket2", "tokio", "tower-service", "tracing", ] [[package]] name = "iana-time-zone" version = "0.1.63" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b0c919e5debc312ad217002b8048a17b7d83f80703865bbfcfebb0458b0b27d8" dependencies = [ "android_system_properties", "core-foundation-sys", "iana-time-zone-haiku", "js-sys", "log", "wasm-bindgen", "windows-core", ] [[package]] name = "iana-time-zone-haiku" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f" dependencies = [ "cc", ] [[package]] name = "icu_collections" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526" dependencies = [ "displaydoc", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_locid" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637" dependencies = [ "displaydoc", "litemap", "tinystr", "writeable", "zerovec", ] [[package]] name = "icu_locid_transform" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e" dependencies = [ "displaydoc", "icu_locid", "icu_locid_transform_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_locid_transform_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7515e6d781098bf9f7205ab3fc7e9709d34554ae0b21ddbcb5febfa4bc7df11d" [[package]] name = "icu_normalizer" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f" dependencies = [ "displaydoc", "icu_collections", "icu_normalizer_data", "icu_properties", "icu_provider", "smallvec", "utf16_iter", "utf8_iter", "write16", "zerovec", ] [[package]] name = "icu_normalizer_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c5e8338228bdc8ab83303f16b797e177953730f601a96c25d10cb3ab0daa0cb7" [[package]] name = "icu_properties" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5" dependencies = [ "displaydoc", "icu_collections", "icu_locid_transform", "icu_properties_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_properties_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85fb8799753b75aee8d2a21d7c14d9f38921b54b3dbda10f5a3c7a7b82dba5e2" [[package]] name = "icu_provider" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9" dependencies = [ "displaydoc", "icu_locid", "icu_provider_macros", "stable_deref_trait", "tinystr", "writeable", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_provider_macros" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "idna" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e" dependencies = [ "idna_adapter", "smallvec", "utf8_iter", ] [[package]] name = "idna_adapter" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71" dependencies = [ "icu_normalizer", "icu_properties", ] [[package]] name = "in-toto" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34037907a12187df805f8581f4542ba3dd838794dca025adbbabbfc4d161eac7" dependencies = [ "chrono", "data-encoding", "derp", "glob", "itoa", "log", "path-clean", "pem", "ring", "serde", "serde_json", "strum", "strum_macros", "thiserror 2.0.12", "untrusted 0.7.1", "walkdir", ] [[package]] name = "indexmap" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cea70ddb795996207ad57735b50c5982d8844f38ba9ee5f1aedcfb708a2aa11e" dependencies = [ "equivalent", "hashbrown", ] [[package]] name = "ipnet" version = "2.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130" [[package]] name = "is_terminal_polyfill" version = "1.70.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf" [[package]] name = "itoa" version = "1.0.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c" [[package]] name = "jiff" version = "0.2.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d07d8d955d798e7a4d6f9c58cd1f1916e790b42b092758a9ef6e16fef9f1b3fd" dependencies = [ "jiff-static", "log", "portable-atomic", "portable-atomic-util", "serde", ] [[package]] name = "jiff-static" version = "0.2.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f244cfe006d98d26f859c7abd1318d85327e1882dc9cef80f62daeeb0adcf300" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "js-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f" dependencies = [ "once_cell", "wasm-bindgen", ] [[package]] name = "libc" version = "0.2.172" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d750af042f7ef4f724306de029d18836c26c1765a54a6a3f094cbd23a7267ffa" [[package]] name = "libredox" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c0ff37bd590ca25063e35af745c343cb7a0271906fb7b37e4813e8f79f00268d" dependencies = [ "bitflags", "libc", ] [[package]] name = "linux-raw-sys" version = "0.9.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12" [[package]] name = "litemap" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856" [[package]] name = "log" version = "0.4.27" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13dc2df351e3202783a1fe0d44375f7295ffb4049267b0f3018346dc122a1d94" [[package]] name = "memchr" version = "2.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3" [[package]] name = "mime" version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a" [[package]] name = "miniz_oxide" version = "0.8.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3be647b768db090acb35d5ec5db2b0e1f1de11133ca123b9eacf5137868f892a" dependencies = [ "adler2", ] [[package]] name = "mio" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd" dependencies = [ "libc", "wasi 0.11.0+wasi-snapshot-preview1", "windows-sys 0.52.0", ] [[package]] name = "nix" version = "0.30.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6" dependencies = [ "bitflags", "cfg-if", "cfg_aliases", "libc", ] [[package]] name = "num-traits" version = "0.2.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841" dependencies = [ "autocfg", ] [[package]] name = "object" version = "0.36.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" dependencies = [ "memchr", ] [[package]] name = "once_cell" version = "1.21.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d" [[package]] name = "openssl-probe" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e" [[package]] name = "path-clean" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "17359afc20d7ab31fdb42bb844c8b3bb1dabd7dcf7e68428492da7f16966fcef" [[package]] name = "pem" version = "3.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "38af38e8470ac9dee3ce1bae1af9c1671fffc44ddfd8bd1d0a3445bf349a8ef3" dependencies = [ "base64", "serde", ] [[package]] name = "percent-encoding" version = "2.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e" [[package]] name = "pin-project-lite" version = "0.2.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b" [[package]] name = "pin-utils" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184" [[package]] name = "portable-atomic" version = "1.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "350e9b48cbc6b0e028b0473b114454c6316e57336ee184ceab6e53f72c178b3e" [[package]] name = "portable-atomic-util" version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d8a2f0d8d040d7848a709caf78912debcc3f33ee4b3cac47d73d1e1069e83507" dependencies = [ "portable-atomic", ] [[package]] name = "ppv-lite86" version = "0.2.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" dependencies = [ "zerocopy", ] [[package]] name = "proc-macro2" version = "1.0.95" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778" dependencies = [ "unicode-ident", ] [[package]] name = "quinn" version = "0.11.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c3bd15a6f2967aef83887dcb9fec0014580467e33720d073560cf015a5683012" dependencies = [ "bytes", "cfg_aliases", "pin-project-lite", "quinn-proto", "quinn-udp", "rustc-hash", "rustls", "socket2", "thiserror 2.0.12", "tokio", "tracing", "web-time", ] [[package]] name = "quinn-proto" version = "0.11.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bcbafbbdbb0f638fe3f35f3c56739f77a8a1d070cb25603226c83339b391472b" dependencies = [ "bytes", "getrandom 0.3.2", "rand", "ring", "rustc-hash", "rustls", "rustls-pki-types", "slab", "thiserror 2.0.12", "tinyvec", "tracing", "web-time", ] [[package]] name = "quinn-udp" version = "0.5.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ee4e529991f949c5e25755532370b8af5d114acae52326361d68d47af64aa842" dependencies = [ "cfg_aliases", "libc", "once_cell", "socket2", "tracing", "windows-sys 0.59.0", ] [[package]] name = "quote" version = "1.0.40" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d" dependencies = [ "proc-macro2", ] [[package]] name = "r-efi" version = "5.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "74765f6d916ee2faa39bc8e68e4f3ed8949b48cccdac59983d287a7cb71ce9c5" [[package]] name = "rand" version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9fbfd9d094a40bf3ae768db9361049ace4c0e04a4fd6b359518bd7b73a73dd97" dependencies = [ "rand_chacha", "rand_core", ] [[package]] name = "rand_chacha" version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb" dependencies = [ "ppv-lite86", "rand_core", ] [[package]] name = "rand_core" version = "0.9.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38" dependencies = [ "getrandom 0.3.2", ] [[package]] name = "rebuilderd-common" version = "0.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3fda973c8c37f0680f92de6df2245f5f5729f0a78b06f55d1628d39f450bea0b" dependencies = [ "anyhow", "chrono", "clap", "colored", "dirs-next", "log", "reqwest", "serde", "toml", "url", ] [[package]] name = "rebuilderd-worker" version = "0.24.0" dependencies = [ "async-trait", "clap", "data-encoding", "env_logger", "futures", "futures-util", "in-toto", "nix", "rebuilderd-common", "serde", "serde_json", "tempfile", "tokio", "toml", "url", ] [[package]] name = "redox_users" version = "0.4.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ba009ff324d1fc1b900bd1fdb31564febe58a8ccc8a6fdbb93b543d33b13ca43" dependencies = [ "getrandom 0.2.16", "libredox", "thiserror 1.0.69", ] [[package]] name = "regex" version = "1.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b544ef1b4eac5dc2db33ea63606ae9ffcfac26c1416a2806ae0bf5f56b201191" dependencies = [ "aho-corasick", "memchr", "regex-automata", "regex-syntax", ] [[package]] name = "regex-automata" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "809e8dc61f6de73b46c85f4c96486310fe304c434cfa43669d7b40f711150908" dependencies = [ "aho-corasick", "memchr", "regex-syntax", ] [[package]] name = "regex-syntax" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c" [[package]] name = "reqwest" version = "0.12.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d19c46a6fdd48bc4dab94b6103fccc55d34c67cc0ad04653aad4ea2a07cd7bbb" dependencies = [ "base64", "bytes", "futures-channel", "futures-core", "futures-util", "http", "http-body", "http-body-util", "hyper", "hyper-rustls", "hyper-util", "ipnet", "js-sys", "log", "mime", "once_cell", "percent-encoding", "pin-project-lite", "quinn", "rustls", "rustls-native-certs", "rustls-pemfile", "rustls-pki-types", "serde", "serde_json", "serde_urlencoded", "sync_wrapper", "tokio", "tokio-rustls", "tokio-util", "tower", "tower-service", "url", "wasm-bindgen", "wasm-bindgen-futures", "wasm-streams", "web-sys", "windows-registry", ] [[package]] name = "ring" version = "0.17.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7" dependencies = [ "cc", "cfg-if", "getrandom 0.2.16", "libc", "untrusted 0.9.0", "windows-sys 0.52.0", ] [[package]] name = "rustc-demangle" version = "0.1.24" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f" [[package]] name = "rustc-hash" version = "2.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d" [[package]] name = "rustix" version = "1.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c71e83d6afe7ff64890ec6b71d6a69bb8a610ab78ce364b3352876bb4c801266" dependencies = [ "bitflags", "errno", "libc", "linux-raw-sys", "windows-sys 0.59.0", ] [[package]] name = "rustls" version = "0.23.26" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "df51b5869f3a441595eac5e8ff14d486ff285f7b8c0df8770e49c3b56351f0f0" dependencies = [ "once_cell", "ring", "rustls-pki-types", "rustls-webpki", "subtle", "zeroize", ] [[package]] name = "rustls-native-certs" version = "0.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fcff2dd52b58a8d98a70243663a0d234c4e2b79235637849d15913394a247d3" dependencies = [ "openssl-probe", "rustls-pki-types", "schannel", "security-framework", ] [[package]] name = "rustls-pemfile" version = "2.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dce314e5fee3f39953d46bb63bb8a46d40c2f8fb7cc5a3b6cab2bde9721d6e50" dependencies = [ "rustls-pki-types", ] [[package]] name = "rustls-pki-types" version = "1.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "917ce264624a4b4db1c364dcc35bfca9ded014d0a958cd47ad3e960e988ea51c" dependencies = [ "web-time", ] [[package]] name = "rustls-webpki" version = "0.103.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fef8b8769aaccf73098557a87cd1816b4f9c7c16811c9c77142aa695c16f2c03" dependencies = [ "ring", "rustls-pki-types", "untrusted 0.9.0", ] [[package]] name = "rustversion" version = "1.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eded382c5f5f786b989652c49544c4877d9f015cc22e145a5ea8ea66c2921cd2" [[package]] name = "ryu" version = "1.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f" [[package]] name = "same-file" version = "1.0.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502" dependencies = [ "winapi-util", ] [[package]] name = "schannel" version = "0.1.27" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f29ebaa345f945cec9fbbc532eb307f0fdad8161f281b6369539c8d84876b3d" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "security-framework" version = "3.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "271720403f46ca04f7ba6f55d438f8bd878d6b8ca0a1046e8228c4145bcbb316" dependencies = [ "bitflags", "core-foundation", "core-foundation-sys", "libc", "security-framework-sys", ] [[package]] name = "security-framework-sys" version = "2.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "49db231d56a190491cb4aeda9527f1ad45345af50b0851622a7adb8c03b01c32" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "serde" version = "1.0.219" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5f0e2c6ed6606019b4e29e69dbaba95b11854410e5347d525002456dbbb786b6" dependencies = [ "serde_derive", ] [[package]] name = "serde_derive" version = "1.0.219" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5b0276cf7f2c73365f7157c8123c21cd9a50fbbd844757af28ca1f5925fc2a00" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "serde_json" version = "1.0.140" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373" dependencies = [ "itoa", "memchr", "ryu", "serde", ] [[package]] name = "serde_spanned" version = "0.6.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "87607cb1398ed59d48732e575a4c28a7a8ebf2454b964fe3f224f2afc07909e1" dependencies = [ "serde", ] [[package]] name = "serde_urlencoded" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd" dependencies = [ "form_urlencoded", "itoa", "ryu", "serde", ] [[package]] name = "shlex" version = "1.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" [[package]] name = "signal-hook-registry" version = "1.4.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9203b8055f63a2a00e2f593bb0510367fe707d7ff1e5c872de2f537b339e5410" dependencies = [ "libc", ] [[package]] name = "slab" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f92a496fb766b417c996b9c5e57daf2f7ad3b0bebe1ccfca4856390e3d3bb67" dependencies = [ "autocfg", ] [[package]] name = "smallvec" version = "1.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8917285742e9f3e1683f0a9c4e6b57960b7314d0b08d30d1ecd426713ee2eee9" [[package]] name = "socket2" version = "0.5.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4f5fd57c80058a56cf5c777ab8a126398ece8e442983605d280a44ce79d0edef" dependencies = [ "libc", "windows-sys 0.52.0", ] [[package]] name = "stable_deref_trait" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3" [[package]] name = "strsim" version = "0.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" [[package]] name = "strum" version = "0.26.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06" [[package]] name = "strum_macros" version = "0.26.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be" dependencies = [ "heck", "proc-macro2", "quote", "rustversion", "syn", ] [[package]] name = "subtle" version = "2.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" [[package]] name = "syn" version = "2.0.101" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf" dependencies = [ "proc-macro2", "quote", "unicode-ident", ] [[package]] name = "sync_wrapper" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263" dependencies = [ "futures-core", ] [[package]] name = "synstructure" version = "0.13.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tempfile" version = "3.19.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7437ac7763b9b123ccf33c338a5cc1bac6f69b45a136c19bdd8a65e3916435bf" dependencies = [ "fastrand", "getrandom 0.3.2", "once_cell", "rustix", "windows-sys 0.59.0", ] [[package]] name = "thiserror" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52" dependencies = [ "thiserror-impl 1.0.69", ] [[package]] name = "thiserror" version = "2.0.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708" dependencies = [ "thiserror-impl 2.0.12", ] [[package]] name = "thiserror-impl" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "thiserror-impl" version = "2.0.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tinystr" version = "0.7.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f" dependencies = [ "displaydoc", "zerovec", ] [[package]] name = "tinyvec" version = "1.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71" dependencies = [ "tinyvec_macros", ] [[package]] name = "tinyvec_macros" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20" [[package]] name = "tokio" version = "1.44.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e6b88822cbe49de4185e3a4cbf8321dd487cf5fe0c5c65695fef6346371e9c48" dependencies = [ "backtrace", "bytes", "libc", "mio", "pin-project-lite", "signal-hook-registry", "socket2", "tokio-macros", "windows-sys 0.52.0", ] [[package]] name = "tokio-macros" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "tokio-rustls" version = "0.26.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e727b36a1a0e8b74c376ac2211e40c2c8af09fb4013c60d910495810f008e9b" dependencies = [ "rustls", "tokio", ] [[package]] name = "tokio-util" version = "0.7.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "66a539a9ad6d5d281510d5bd368c973d636c02dbf8a67300bfb6b950696ad7df" dependencies = [ "bytes", "futures-core", "futures-sink", "pin-project-lite", "tokio", ] [[package]] name = "toml" version = "0.8.22" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "05ae329d1f08c4d17a59bed7ff5b5a769d062e64a62d34a3261b219e62cd5aae" dependencies = [ "serde", "serde_spanned", "toml_datetime", "toml_edit", ] [[package]] name = "toml_datetime" version = "0.6.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3da5db5a963e24bc68be8b17b6fa82814bb22ee8660f192bb182771d498f09a3" dependencies = [ "serde", ] [[package]] name = "toml_edit" version = "0.22.26" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "310068873db2c5b3e7659d2cc35d21855dbafa50d1ce336397c666e3cb08137e" dependencies = [ "indexmap", "serde", "serde_spanned", "toml_datetime", "toml_write", "winnow", ] [[package]] name = "toml_write" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bfb942dfe1d8e29a7ee7fcbde5bd2b9a25fb89aa70caea2eba3bee836ff41076" [[package]] name = "tower" version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9" dependencies = [ "futures-core", "futures-util", "pin-project-lite", "sync_wrapper", "tokio", "tower-layer", "tower-service", ] [[package]] name = "tower-layer" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e" [[package]] name = "tower-service" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3" [[package]] name = "tracing" version = "0.1.41" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0" dependencies = [ "pin-project-lite", "tracing-core", ] [[package]] name = "tracing-core" version = "0.1.33" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e672c95779cf947c5311f83787af4fa8fffd12fb27e4993211a84bdfd9610f9c" dependencies = [ "once_cell", ] [[package]] name = "try-lock" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" [[package]] name = "unicode-ident" version = "1.0.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512" [[package]] name = "untrusted" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a" [[package]] name = "untrusted" version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" [[package]] name = "url" version = "2.5.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60" dependencies = [ "form_urlencoded", "idna", "percent-encoding", ] [[package]] name = "utf16_iter" version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246" [[package]] name = "utf8_iter" version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" [[package]] name = "utf8parse" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" [[package]] name = "walkdir" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b" dependencies = [ "same-file", "winapi-util", ] [[package]] name = "want" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e" dependencies = [ "try-lock", ] [[package]] name = "wasi" version = "0.11.0+wasi-snapshot-preview1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423" [[package]] name = "wasi" version = "0.14.2+wasi-0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3" dependencies = [ "wit-bindgen-rt", ] [[package]] name = "wasm-bindgen" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5" dependencies = [ "cfg-if", "once_cell", "rustversion", "wasm-bindgen-macro", ] [[package]] name = "wasm-bindgen-backend" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6" dependencies = [ "bumpalo", "log", "proc-macro2", "quote", "syn", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-futures" version = "0.4.50" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "555d470ec0bc3bb57890405e5d4322cc9ea83cebb085523ced7be4144dac1e61" dependencies = [ "cfg-if", "js-sys", "once_cell", "wasm-bindgen", "web-sys", ] [[package]] name = "wasm-bindgen-macro" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407" dependencies = [ "quote", "wasm-bindgen-macro-support", ] [[package]] name = "wasm-bindgen-macro-support" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de" dependencies = [ "proc-macro2", "quote", "syn", "wasm-bindgen-backend", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-shared" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d" dependencies = [ "unicode-ident", ] [[package]] name = "wasm-streams" version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65" dependencies = [ "futures-util", "js-sys", "wasm-bindgen", "wasm-bindgen-futures", "web-sys", ] [[package]] name = "web-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2" dependencies = [ "js-sys", "wasm-bindgen", ] [[package]] name = "web-time" version = "1.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb" dependencies = [ "js-sys", "wasm-bindgen", ] [[package]] name = "winapi" version = "0.3.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419" dependencies = [ "winapi-i686-pc-windows-gnu", "winapi-x86_64-pc-windows-gnu", ] [[package]] name = "winapi-i686-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" [[package]] name = "winapi-util" version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "winapi-x86_64-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" [[package]] name = "windows-core" version = "0.61.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4763c1de310c86d75a878046489e2e5ba02c649d185f21c67d4cf8a56d098980" dependencies = [ "windows-implement", "windows-interface", "windows-link", "windows-result", "windows-strings 0.4.0", ] [[package]] name = "windows-implement" version = "0.60.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a47fddd13af08290e67f4acabf4b459f647552718f683a7b415d290ac744a836" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "windows-interface" version = "0.59.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bd9211b69f8dcdfa817bfd14bf1c97c9188afa36f4750130fcdf3f400eca9fa8" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "windows-link" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "76840935b766e1b0a05c0066835fb9ec80071d4c09a16f6bd5f7e655e3c14c38" [[package]] name = "windows-registry" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4286ad90ddb45071efd1a66dfa43eb02dd0dfbae1545ad6cc3c51cf34d7e8ba3" dependencies = [ "windows-result", "windows-strings 0.3.1", "windows-targets 0.53.0", ] [[package]] name = "windows-result" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c64fd11a4fd95df68efcfee5f44a294fe71b8bc6a91993e2791938abcc712252" dependencies = [ "windows-link", ] [[package]] name = "windows-strings" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "87fa48cc5d406560701792be122a10132491cff9d0aeb23583cc2dcafc847319" dependencies = [ "windows-link", ] [[package]] name = "windows-strings" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7a2ba9642430ee452d5a7aa78d72907ebe8cfda358e8cb7918a2050581322f97" dependencies = [ "windows-link", ] [[package]] name = "windows-sys" version = "0.52.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d" dependencies = [ "windows-targets 0.52.6", ] [[package]] name = "windows-sys" version = "0.59.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b" dependencies = [ "windows-targets 0.52.6", ] [[package]] name = "windows-targets" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973" dependencies = [ "windows_aarch64_gnullvm 0.52.6", "windows_aarch64_msvc 0.52.6", "windows_i686_gnu 0.52.6", "windows_i686_gnullvm 0.52.6", "windows_i686_msvc 0.52.6", "windows_x86_64_gnu 0.52.6", "windows_x86_64_gnullvm 0.52.6", "windows_x86_64_msvc 0.52.6", ] [[package]] name = "windows-targets" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b1e4c7e8ceaaf9cb7d7507c974735728ab453b67ef8f18febdd7c11fe59dca8b" dependencies = [ "windows_aarch64_gnullvm 0.53.0", "windows_aarch64_msvc 0.53.0", "windows_i686_gnu 0.53.0", "windows_i686_gnullvm 0.53.0", "windows_i686_msvc 0.53.0", "windows_x86_64_gnu 0.53.0", "windows_x86_64_gnullvm 0.53.0", "windows_x86_64_msvc 0.53.0", ] [[package]] name = "windows_aarch64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" [[package]] name = "windows_aarch64_gnullvm" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "86b8d5f90ddd19cb4a147a5fa63ca848db3df085e25fee3cc10b39b6eebae764" [[package]] name = "windows_aarch64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" [[package]] name = "windows_aarch64_msvc" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c7651a1f62a11b8cbd5e0d42526e55f2c99886c77e007179efff86c2b137e66c" [[package]] name = "windows_i686_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" [[package]] name = "windows_i686_gnu" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c1dc67659d35f387f5f6c479dc4e28f1d4bb90ddd1a5d3da2e5d97b42d6272c3" [[package]] name = "windows_i686_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" [[package]] name = "windows_i686_gnullvm" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9ce6ccbdedbf6d6354471319e781c0dfef054c81fbc7cf83f338a4296c0cae11" [[package]] name = "windows_i686_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" [[package]] name = "windows_i686_msvc" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "581fee95406bb13382d2f65cd4a908ca7b1e4c2f1917f143ba16efe98a589b5d" [[package]] name = "windows_x86_64_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" [[package]] name = "windows_x86_64_gnu" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2e55b5ac9ea33f2fc1716d1742db15574fd6fc8dadc51caab1c16a3d3b4190ba" [[package]] name = "windows_x86_64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" [[package]] name = "windows_x86_64_gnullvm" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0a6e035dd0599267ce1ee132e51c27dd29437f63325753051e71dd9e42406c57" [[package]] name = "windows_x86_64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" [[package]] name = "windows_x86_64_msvc" version = "0.53.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "271414315aff87387382ec3d271b52d7ae78726f5d44ac98b4f4030c91880486" [[package]] name = "winnow" version = "0.7.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d9fb597c990f03753e08d3c29efbfcf2019a003b4bf4ba19225c158e1549f0f3" dependencies = [ "memchr", ] [[package]] name = "wit-bindgen-rt" version = "0.39.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1" dependencies = [ "bitflags", ] [[package]] name = "write16" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936" [[package]] name = "writeable" version = "0.5.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51" [[package]] name = "yoke" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40" dependencies = [ "serde", "stable_deref_trait", "yoke-derive", "zerofrom", ] [[package]] name = "yoke-derive" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154" dependencies = [ "proc-macro2", "quote", "syn", "synstructure", ] [[package]] name = "zerocopy" version = "0.8.25" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a1702d9583232ddb9174e01bb7c15a2ab8fb1bc6f227aa1233858c351a3ba0cb" dependencies = [ "zerocopy-derive", ] [[package]] name = "zerocopy-derive" version = "0.8.25" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28a6e20d751156648aa063f3800b706ee209a32c0b4d9f24be3d980b01be55ef" dependencies = [ "proc-macro2", "quote", "syn", ] [[package]] name = "zerofrom" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5" dependencies = [ "zerofrom-derive", ] [[package]] name = "zerofrom-derive" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502" dependencies = [ "proc-macro2", "quote", "syn", "synstructure", ] [[package]] name = "zeroize" version = "1.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde" [[package]] name = "zerovec" version = "0.10.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079" dependencies = [ "yoke", "zerofrom", "zerovec-derive", ] [[package]] name = "zerovec-derive" version = "0.10.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6" dependencies = [ "proc-macro2", "quote", "syn", ] rebuilderd-worker-0.24.0/Cargo.toml0000644000000042670000000000100125560ustar # THIS FILE IS AUTOMATICALLY GENERATED BY CARGO # # When uploading crates to the registry Cargo will automatically # "normalize" Cargo.toml files for maximal compatibility # with all versions of Cargo and also rewrite `path` dependencies # to registry (e.g., crates.io) dependencies. # # If you are reading this file be aware that the original Cargo.toml # will likely look very different (and much more reasonable). # See Cargo.toml.orig for the original contents. [package] edition = "2021" name = "rebuilderd-worker" version = "0.24.0" authors = ["kpcyrd "] build = false autolib = false autobins = false autoexamples = false autotests = false autobenches = false description = "rebuilderd - rebuild worker" readme = "README.md" license = "GPL-3.0-or-later" repository = "https://github.com/kpcyrd/rebuilderd" [package.metadata.deb] assets = [ [ "target/release/rebuilderd-worker", "usr/bin/", "755", ], [ "rebuilder-archlinux.sh", "usr/libexec/rebuilderd/", "755", ], [ "rebuilder-debian.sh", "usr/libexec/rebuilderd/", "755", ], [ "../contrib/confs/rebuilderd-worker.conf", "etc/", "640", ], [ "../contrib/systemd/rebuilderd-worker@.service", "usr/lib/systemd/system/", "640", ], ] depends = "$auto, rebuilderd" [[bin]] name = "rebuilderd-worker" path = "src/main.rs" [dependencies.async-trait] version = "0.1.56" [dependencies.clap] version = "4" features = [ "derive", "env", ] [dependencies.data-encoding] version = "2" [dependencies.env_logger] version = "0.11" [dependencies.futures] version = "0.3.21" [dependencies.futures-util] version = "0.3.21" [dependencies.in-toto] version = "0.4" [dependencies.nix] version = "0.30" features = [ "process", "signal", ] [dependencies.rebuilderd-common] version = "=0.23.0" [dependencies.serde] version = "1.0.137" features = ["derive"] [dependencies.serde_json] version = "1.0.81" [dependencies.tempfile] version = "3.3.0" [dependencies.tokio] version = "1.19.2" features = [ "macros", "rt-multi-thread", "fs", "io-util", "process", "io-std", "time", ] [dependencies.toml] version = "0.8" [dependencies.url] version = "2.2.2" rebuilderd-worker-0.24.0/Cargo.toml.orig000064400000000000000000000022471046102023000162330ustar 00000000000000[package] name = "rebuilderd-worker" version = "0.24.0" description = "rebuilderd - rebuild worker" authors = ["kpcyrd "] license = "GPL-3.0-or-later" repository = "https://github.com/kpcyrd/rebuilderd" edition = "2021" [package.metadata.deb] depends = "$auto, rebuilderd" assets = [ ["target/release/rebuilderd-worker", "usr/bin/", "755"], ["rebuilder-archlinux.sh", "usr/libexec/rebuilderd/", "755"], ["rebuilder-debian.sh", "usr/libexec/rebuilderd/", "755"], ["../contrib/confs/rebuilderd-worker.conf", "etc/", "640"], ["../contrib/systemd/rebuilderd-worker@.service", "usr/lib/systemd/system/", "640"], ] [dependencies] async-trait = "0.1.56" clap = { version = "4", features = ["derive", "env"] } data-encoding = "2" env_logger = "0.11" futures = "0.3.21" futures-util = "0.3.21" in-toto = "0.4" nix = { version = "0.30", features = ["process", "signal"] } rebuilderd-common = { version= "=0.23.0", path="../common" } serde = { version="1.0.137", features=["derive"] } serde_json = "1.0.81" tempfile = "3.3.0" tokio = { version="1.19.2", features=["macros", "rt-multi-thread", "fs", "io-util", "process", "io-std", "time"] } toml = "0.8" url = "2.2.2" rebuilderd-worker-0.24.0/Dockerfile.alpine000064400000000000000000000012101046102023000165720ustar 00000000000000FROM rust:alpine3.21 ENV RUSTFLAGS="-C target-feature=-crt-static" WORKDIR /usr/src/rebuilderd RUN apk add --no-cache musl-dev pkgconfig COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/alpine/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/alpine/target/release/rebuilderd-worker / FROM alpine:3.21 RUN apk add --no-cache libgcc COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=alpine=/usr/local/libexec/rebuilderd/rebuilder-alpine.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.24.0/Dockerfile.archlinux000064400000000000000000000013331046102023000173250ustar 00000000000000FROM archlinux WORKDIR /usr/src/rebuilderd RUN pacman -Suy --noconfirm gcc pkgconf cargo COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/archlinux/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/archlinux/target/release/rebuilderd-worker / FROM archlinux RUN pacman -Suy --noconfirm archlinux-repro COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-archlinux.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=archlinux=/usr/local/libexec/rebuilderd/rebuilder-archlinux.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.24.0/Dockerfile.debian000064400000000000000000000013601046102023000165520ustar 00000000000000FROM rust:bookworm WORKDIR /usr/src/rebuilderd COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/debian/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/debian/target/release/rebuilderd-worker / FROM debian:trixie RUN apt-get update && apt install -y apt-utils debian-keyring devscripts diffoscope dpkg-dev mmdebstrap sbuild uidmap COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-debian.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=debian=/usr/local/libexec/rebuilderd/rebuilder-debian.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.24.0/Dockerfile.fedora000064400000000000000000000012121046102023000165640ustar 00000000000000FROM fedora WORKDIR /usr/src/rebuilderd RUN dnf -y install cargo rust COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/fedora/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/fedora/target/release/rebuilderd-worker / FROM fedora COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-fedora.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=fedora=/usr/local/libexec/rebuilderd/rebuilder-fedora.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.24.0/Dockerfile.tails000064400000000000000000000014711046102023000164470ustar 00000000000000FROM rust:bookworm WORKDIR /usr/src/rebuilderd COPY . . RUN --mount=type=cache,target=/var/cache/buildkit \ CARGO_HOME=/var/cache/buildkit/cargo \ CARGO_TARGET_DIR=/var/cache/buildkit/debian/target \ cargo build --release --locked -p rebuilderd-worker && \ cp -v /var/cache/buildkit/debian/target/release/rebuilderd-worker / FROM debian:bookworm RUN apt-get update && apt-get install -y dpkg-dev sudo \ psmisc git rake libvirt-daemon-system dnsmasq-base ebtables faketime pigz qemu-system-x86 qemu-utils vagrant vagrant-libvirt vmdb2 COPY --from=0 \ /usr/src/rebuilderd/worker/rebuilder-tails.sh \ /usr/local/libexec/rebuilderd/ COPY --from=0 /rebuilderd-worker /usr/local/bin/ ENV REBUILDERD_WORKER_BACKEND=tails=/usr/local/libexec/rebuilderd/rebuilder-tails.sh ENTRYPOINT ["rebuilderd-worker"] rebuilderd-worker-0.24.0/README.md000064400000000000000000000024201046102023000146140ustar 00000000000000# Rebuilderd Workers Workers are tasked with, in short, carrying out the actual rebuild. Here you'll find: 1. The rust codebase for the worker daemon (that listens in for rebuild commands) under src/ 2. A series of entrypoints needed by the workers (i.e., rebuilder-{archlinux,debian}) to instantiate new build environments. 3. A series of dockerfiles to build dockerized worker workloads (e.g., in case you would want to use an [autoscaling group in a k8s cluster](https://kubernetes.io/docs/tasks/run-application/horizontal-pod-autoscale/) or in case you just want to keep workers separated). You can test workers individually by (for example) building a container and scheduling a build (for a debian worker): ```bash $ docker build -t rebuilderd-worker-debian worker/Dockerfile.debian $ docker run --cap-add=SYS_ADMIN --rm \ rebuilderd-worker-debian build debian \ https://buildinfos.debian.net/buildinfo-pool/r/rust-sniffglue/rust-sniffglue_0.11.1-6+b1_amd64.buildinfo ``` | :memo: WARNING | |:---------------------------| | note these commands are run in the root of the repo, not here| | :warning: WARNING | |:---------------------------| | Running Debian workers as containers requires SYS\_ADMIN capabilities which could be dangerous! | rebuilderd-worker-0.24.0/rebuilder-archlinux.sh000075500000000000000000000001201046102023000176370ustar 00000000000000#!/bin/sh set -xe NOCHECK=1 archlinux-repro -o "${REBUILDERD_OUTDIR}" -- "${1}" rebuilderd-worker-0.24.0/rebuilder-debian.sh000075500000000000000000000003041046102023000170700ustar 00000000000000#!/bin/sh set -xe cd "$(dirname "$1")" # for production it's useful to call debrebuild with --cache="$directory" debrebuild --buildresult="${REBUILDERD_OUTDIR}" --builder=sbuild+unshare -- "${1}" rebuilderd-worker-0.24.0/rebuilder-fedora.sh000075500000000000000000000000251046102023000171060ustar 00000000000000#!/bin/sh echo hello rebuilderd-worker-0.24.0/rebuilder-tails.sh000075500000000000000000000026301046102023000167660ustar 00000000000000#!/bin/sh set -eux IMG_PATH="$1" TAG=$(basename "$IMG_PATH" | sed -nr 's/tails-amd64-([0-9a-z~\.]+)\.[^\]+/\1/p' | sed 's/~/-/g') REPO_URL='https://gitlab.tails.boum.org/tails/tails.git' export TAILS_BUILD_OPTIONS="nomergebasebranch forcecleanup" # cleanup possible leftovers virsh vol-list default | awk '{print $1}' | grep ^tails-builder- | xargs -rL1 virsh vol-delete --pool default # setup temporary directory WORK_DIR=$(mktemp -d -t tails.XXXXXX) trap '{ rm -rf -- "$WORK_DIR"; }' EXIT # set the folder public so libvirt user can access it chmod 0711 "$WORK_DIR" # import gpg keys to authenticate source code export HOME="$WORK_DIR/home" mkdir -m 0700 -- "$HOME" # Fetch the latest key over https curl -sSf https://tails.boum.org/tails-signing.key | gpg --import # clone repo REPO_DEST="$WORK_DIR/tails" # doesn't work even with nomergebasebranch #git clone --depth=1 --branch "$TAG" -- "$REPO_URL" "$REPO_DEST" git clone --branch "$TAG" -- "$REPO_URL" "$REPO_DEST" cd "$REPO_DEST" git verify-tag -v -- "$TAG" git submodule update --init # read and export SOURCE_DATE_EPOCH to normalize the build time SOURCE_DATE_EPOCH=$(date --utc --date="$(dpkg-parsechangelog --show-field=Date)" '+%s') export SOURCE_DATE_EPOCH # build the image # libvirtd needs to be started, /var/run/libvirt needs to be mounted if run inside a container ARTIFACTS="$REBUILDERD_OUTDIR" rake build # list build outputs ls -la "$REBUILDERD_OUTDIR" rebuilderd-worker-0.24.0/src/args.rs000064400000000000000000000031121046102023000154250ustar 00000000000000use clap::{ArgAction, Parser}; use std::path::PathBuf; #[derive(Debug, Parser)] #[command(version)] pub struct Args { /// Verbose logging #[arg(short, long, global = true, action(ArgAction::Count))] pub verbose: u8, #[command(subcommand)] pub subcommand: SubCommand, #[arg(short, long)] pub name: Option, #[arg(short, long, global = true, env = "REBUILDERD_WORKER_CONFIG")] pub config: Option, #[arg(long = "backend", global = true, env = "REBUILDERD_WORKER_BACKEND")] pub backends: Vec, } #[derive(Debug, Parser)] pub enum SubCommand { /// Rebuild an individual package Build(Build), /// Connect to a central rebuilderd daemon for work Connect(Connect), /// Invoke diffoscope similar to how a rebuilder would invoke it Diffoscope(Diffoscope), /// Load and print a config CheckConfig, } #[derive(Debug, Parser)] pub struct Build { /// Selects the right build profile from the configuration pub distro: String, /// The pre-built artifact that should be reproduced pub artifact_url: String, /// Pass a different input file to the rebuilder backend #[arg(long)] pub input_url: Option, /// Use a specific rebuilder script instead of the default #[arg(long)] pub script_location: Option, /// Use diffoscope to generate a diff #[arg(long)] pub gen_diffoscope: bool, } #[derive(Debug, Parser)] pub struct Connect { pub endpoint: Option, } #[derive(Debug, Parser)] pub struct Diffoscope { pub a: PathBuf, pub b: PathBuf, } rebuilderd-worker-0.24.0/src/auth.rs000064400000000000000000000036721046102023000154450ustar 00000000000000use data_encoding::BASE64; use in_toto::crypto::{KeyType, PrivateKey, SignatureScheme}; use rebuilderd_common::api::Client; use rebuilderd_common::config::ConfigFile; use rebuilderd_common::errors::*; use std::fs; use std::fs::OpenOptions; use std::io::prelude::*; use std::io::ErrorKind; use std::os::unix::fs::OpenOptionsExt; use std::path::Path; pub struct Profile { pub pubkey: String, pub privkey: PrivateKey, } impl Profile { pub fn new_client( &self, config: ConfigFile, endpoint: String, signup_secret: Option, auth_cookie: Option, ) -> Result { let mut client = Client::new(config, Some(endpoint))?; client.worker_key(self.pubkey.clone()); if let Some(signup_secret) = signup_secret { client.signup_secret(signup_secret); } else if let Some(auth_cookie) = auth_cookie { client.auth_cookie(auth_cookie); } Ok(client) } } #[inline] pub fn load() -> Result { match fs::remove_file("rebuilder.key") { Ok(_) => info!("Deleted old v1 worker key"), Err(err) if err.kind() == ErrorKind::NotFound => (), Err(err) => warn!("Failed to delete old v1 worker key: {:#}", err), } load_key("rebuilder.v2.key") } fn load_key>(path: P) -> Result { let path = path.as_ref(); let privkey = if path.exists() { let content = fs::read(path)?; PrivateKey::from_pkcs8(&content, SignatureScheme::Ed25519)? } else { let sk = PrivateKey::new(KeyType::Ed25519)?; let mut file = OpenOptions::new() .mode(0o640) .write(true) .create(true) .open(path)?; file.write_all(&sk[..])?; PrivateKey::from_pkcs8(&sk, SignatureScheme::Ed25519)? }; let pk = privkey.public(); let pubkey = BASE64.encode(pk.as_bytes()); Ok(Profile { pubkey, privkey }) } rebuilderd-worker-0.24.0/src/config.rs000064400000000000000000000042201046102023000157370ustar 00000000000000use crate::args::Args; use rebuilderd_common::errors::*; use serde::{Deserialize, Serialize}; use std::collections::HashMap; use std::fs; use std::path::PathBuf; #[derive(Debug, Default, Serialize, Deserialize)] pub struct ConfigFile { pub endpoint: Option, pub signup_secret: Option, #[serde(default)] pub build: Build, #[serde(default)] pub diffoscope: Diffoscope, #[serde(default, rename = "backend")] pub backends: HashMap, } #[derive(Debug, Default, Clone, Serialize, Deserialize)] pub struct Build { pub timeout: Option, pub max_bytes: Option, #[serde(default)] pub silent: bool, } #[derive(Debug, Default, Clone, Serialize, Deserialize)] pub struct Diffoscope { #[serde(default)] pub enabled: bool, #[serde(default)] pub args: Vec, pub timeout: Option, pub max_bytes: Option, } #[derive(Debug, Clone, Serialize, Deserialize)] pub struct Backend { pub path: PathBuf, } pub fn load(args: &Args) -> Result { let path = if let Some(path) = args.config.as_ref() { Some(path.to_owned()) } else { let path = PathBuf::from("/etc/rebuilderd-worker.conf"); if path.exists() { warn!("Using the implicit `-c /etc/rebuilderd-worker.conf` is going to be removed in the future"); Some(path) } else { None } }; let mut conf = if let Some(path) = path { info!("Loading configuration from {:?}", path); let buf = fs::read_to_string(&path).with_context(|| anyhow!("Failed to open {:?}", path))?; toml::from_str::(&buf)? } else { info!("Using default configuration"); ConfigFile::default() }; for backend in &args.backends { debug!("Adding to list of supported backends: {:?}", backend); let (key, path) = backend.split_once('=').ok_or_else(|| { anyhow!("Invalid argument, expected format is --backend distro=/path/to/script") })?; conf.backends .insert(key.into(), Backend { path: path.into() }); } Ok(conf) } rebuilderd-worker-0.24.0/src/diffoscope.rs000064400000000000000000000016171046102023000166220ustar 00000000000000use crate::config; use crate::proc; use rebuilderd_common::errors::*; use std::collections::HashMap; use std::ffi::OsString; use std::path::Path; use std::time::Duration; pub async fn diffoscope(a: &Path, b: &Path, settings: &config::Diffoscope) -> Result { let mut args = settings.args.iter().map(OsString::from).collect::>(); args.push("--".into()); args.push(a.into()); args.push(b.into()); let timeout = settings.timeout.unwrap_or(3600); // 1h let opts = proc::Options { timeout: Duration::from_secs(timeout), size_limit: settings.max_bytes, kill_at_size_limit: true, passthrough: false, envs: HashMap::new(), }; let bin = Path::new("diffoscope"); let mut output = Vec::new(); proc::run(bin, &args, opts, &mut output).await?; let output = String::from_utf8_lossy(&output); Ok(output.into_owned()) } rebuilderd-worker-0.24.0/src/download.rs000064400000000000000000000024131046102023000163030ustar 00000000000000use futures_util::StreamExt; use rebuilderd_common::errors::*; use rebuilderd_common::http; use std::path::{Path, PathBuf}; use tokio::fs::File; use tokio::io::AsyncWriteExt; use url::Url; pub async fn download(url_str: &str, path: &Path) -> Result { let url = url_str .parse::() .context("Failed to parse input as url")?; let filename = url .path_segments() .ok_or_else(|| format_err!("Url doesn't seem to have a path"))? .last() .ok_or_else(|| format_err!("Failed to get filename from path"))? .to_owned(); if filename.is_empty() { bail!("Filename detected from url is empty"); } let target = path.join(&filename); info!("Downloading {:?} to {:?}", url_str, target); let client = http::client()?; let mut stream = client .get(url) .send() .await? .error_for_status()? .bytes_stream(); let mut f = File::create(&target) .await .context("Failed to create output file")?; let mut bytes = 0; while let Some(item) = stream.next().await { let item = item?; f.write_all(&item).await?; bytes += item.len(); } info!("Downloaded {} bytes", bytes); Ok(PathBuf::from(filename)) } rebuilderd-worker-0.24.0/src/heartbeat.rs000064400000000000000000000003161046102023000164330ustar 00000000000000use async_trait::async_trait; use rebuilderd_common::errors::*; use std::time::Duration; #[async_trait] pub trait HeartBeat { fn interval(&self) -> Duration; async fn ping(&self) -> Result<()>; } rebuilderd-worker-0.24.0/src/main.rs000064400000000000000000000201341046102023000154200ustar 00000000000000#![recursion_limit = "256"] use crate::args::{Args, SubCommand}; use crate::rebuild::Context; use async_trait::async_trait; use clap::Parser; use env_logger::Env; use in_toto::crypto::PrivateKey; use rebuilderd_common::api::*; use rebuilderd_common::auth::find_auth_cookie; use rebuilderd_common::config::*; use rebuilderd_common::errors::Context as _; use rebuilderd_common::errors::*; use rebuilderd_common::PkgArtifact; use std::fs; use std::io::{self, Write}; use std::path::Path; use std::time::Duration; use tokio::time; pub mod args; pub mod auth; pub mod config; pub mod diffoscope; pub mod download; pub mod heartbeat; pub mod proc; pub mod rebuild; pub mod setup; pub struct HttpHeartBeat<'a> { client: &'a Client, queue_id: i32, } #[async_trait] impl heartbeat::HeartBeat for HttpHeartBeat<'_> { fn interval(&self) -> Duration { Duration::from_secs(PING_INTERVAL) } async fn ping(&self) -> Result<()> { if let Err(err) = self .client .ping_build(&PingRequest { queue_id: self.queue_id, }) .await { warn!("Failed to ping: {}", err); } Ok(()) } } async fn rebuild(client: &Client, privkey: &PrivateKey, config: &config::ConfigFile) -> Result<()> { info!("Requesting work from rebuilderd..."); let supported_backends = config.backends.keys().map(String::from).collect::>(); match client.pop_queue(&WorkQuery { supported_backends }).await? { JobAssignment::Nothing => { info!("No pending tasks, sleeping for {}s...", IDLE_DELAY); time::sleep(Duration::from_secs(IDLE_DELAY)).await; } JobAssignment::Rebuild(rb) => { info!( "Starting rebuild of {:?} {:?}", rb.pkgbase.name, rb.pkgbase.version ); let backend = config .backends .get(&rb.pkgbase.distro) .cloned() .ok_or_else(|| anyhow!("No backend for {:?} configured", rb.pkgbase.distro))?; let ctx = Context { artifacts: rb.pkgbase.artifacts.clone(), input_url: rb.pkgbase.input_url.clone(), backend, build: config.build.clone(), diffoscope: config.diffoscope.clone(), privkey, }; let hb = HttpHeartBeat { client, queue_id: rb.id, }; let mut log = Vec::new(); let rebuilds = match rebuild::rebuild_with_heartbeat(&ctx, &mut log, &hb).await { Ok(res) => res, Err(err) => { error!( "Unexpected error while rebuilding package package: {:#}", err ); let msg = format!( "rebuilderd: unexpected error while rebuilding package: {:#}\n", err ); if !log.is_empty() { log.extend(b"\n\n"); } log.extend(msg.as_bytes()); let mut res = vec![]; for artifact in &rb.pkgbase.artifacts { res.push((artifact.clone(), Rebuild::new(BuildStatus::Fail))); } res } }; let build_log = String::from_utf8_lossy(&log).into_owned(); let report = BuildReport { queue: *rb, build_log, rebuilds, }; info!("Sending build report to rebuilderd..."); client .report_build(&report) .await .context("Failed to POST to rebuilderd")?; } } Ok(()) } async fn run_worker_loop( client: &Client, privkey: &PrivateKey, config: &config::ConfigFile, ) -> Result<()> { loop { if let Err(err) = rebuild(client, privkey, config).await { error!( "Unexpected error, sleeping for {}s: {:#}", API_ERROR_DELAY, err ); time::sleep(Duration::from_secs(API_ERROR_DELAY)).await; } let restart_flag = Path::new("rebuilderd.restart"); if restart_flag.exists() { info!("Restart flag exists, initiating shutdown"); if let Err(err) = fs::remove_file(restart_flag) { error!("Failed to remove restart flag: {:#}", err); } return Ok(()); } time::sleep(Duration::from_secs(WORKER_DELAY)).await; } } #[tokio::main] async fn main() -> Result<()> { let args = Args::parse(); let logging = match args.verbose { 0 => "info", 1 => "debug", _ => "trace", }; env_logger::init_from_env(Env::default().default_filter_or(logging)); let config = config::load(&args).context("Failed to load config file")?; let cookie = find_auth_cookie().ok(); if cookie.is_some() { debug!("Successfully loaded auth cookie"); } if let Some(name) = args.name { setup::run(&name).context("Failed to setup worker")?; } let profile = auth::load()?; match args.subcommand { SubCommand::Connect(connect) => { let system_config = rebuilderd_common::config::load(None::) .context("Failed to load system config")?; let endpoint = if let Some(endpoint) = connect.endpoint { endpoint } else { config .endpoint .clone() .ok_or_else(|| format_err!("No endpoint configured"))? }; let client = profile.new_client( system_config, endpoint, config.signup_secret.clone(), cookie, )?; run_worker_loop(&client, &profile.privkey, &config).await?; } // this is only really for debugging SubCommand::Build(build) => { let backend = if let Some(script_location) = build.script_location { config::Backend { path: script_location, } } else { config .backends .get(&build.distro) .cloned() .ok_or_else(|| anyhow!("No backend configured in config file"))? }; let diffoscope = config::Diffoscope { enabled: build.gen_diffoscope, ..Default::default() }; let mut log = Vec::new(); let res = rebuild::rebuild( &Context { artifacts: vec![PkgArtifact { name: "anonymous".to_string(), version: "0.0.0".to_string(), url: build.artifact_url, }], input_url: build.input_url, backend, build: config.build, diffoscope, privkey: &profile.privkey, }, &mut log, ) .await?; for (artifact, res) in res { trace!("rebuild result object for {:?} is {:?}", artifact, res); if res.status == BuildStatus::Good { info!("Package verified successfully"); } else { error!("Package failed to verify"); if let Some(diffoscope) = res.diffoscope { io::stdout().write_all(diffoscope.as_bytes()).ok(); } } } } SubCommand::Diffoscope(diffoscope) => { let output = diffoscope::diffoscope(&diffoscope.a, &diffoscope.b, &config.diffoscope).await?; print!("{}", output); } SubCommand::CheckConfig => { let json = serde_json::to_string_pretty(&config)?; println!("{}", json); } } Ok(()) } rebuilderd-worker-0.24.0/src/proc.rs000064400000000000000000000261211046102023000154410ustar 00000000000000use futures_util::FutureExt; use nix::sys::signal::{self, Signal}; use nix::unistd::Pid; use rebuilderd_common::errors::*; use std::cmp; use std::collections::HashMap; use std::ffi::OsStr; use std::fmt; use std::path::Path; use std::process::Stdio; use std::time::{Duration, Instant}; use tokio::io::{AsyncReadExt, AsyncWriteExt}; use tokio::process::{Child, Command}; use tokio::select; use tokio::time; const SIGKILL_DELAY: u64 = 10; pub struct Options { pub timeout: Duration, pub size_limit: Option, pub kill_at_size_limit: bool, pub passthrough: bool, pub envs: HashMap, } pub struct Capture<'a> { output: &'a mut Vec, timeout: Duration, size_limit: Option, kill_at_size_limit: bool, start: Instant, sigterm_sent: Option, truncated: bool, } pub fn capture(output: &mut Vec, opts: Options) -> Capture<'_> { let start = Instant::now(); Capture { output, timeout: opts.timeout, size_limit: opts.size_limit, kill_at_size_limit: opts.kill_at_size_limit, start, sigterm_sent: None, truncated: false, } } impl Capture<'_> { pub async fn push_bytes(&mut self, child: &mut Child, mut slice: &[u8]) -> Result<()> { if !self.truncated { if let Some(size_limit) = &self.size_limit { let n = cmp::min(size_limit - self.output.len(), slice.len()); if n < 1 { warn!( "Exceeding output limit: output={}, slice={}, limit={}", self.output.len(), slice.len(), size_limit ); let msg = format!("TRUNCATED DUE TO SIZE LIMIT: {} bytes", size_limit); self.truncate(child, &msg, self.kill_at_size_limit).await?; return Ok(()); } else { // truncate to stay within the limit slice = &slice[..n]; } } self.output.extend(slice); } Ok(()) } fn kill(pid: u32, signal: Signal) -> Result<()> { // convert 1234 to -1234 to kill grand-children too let pid = -(pid as i32); info!("Sending {} to child(pid={})", signal, pid); signal::kill(Pid::from_raw(pid), signal)?; Ok(()) } async fn truncate(&mut self, child: &mut Child, reason: &str, kill: bool) -> Result<()> { if kill { if let Some(pid) = child.id() { Self::kill(pid, Signal::SIGTERM)?; } self.sigterm_sent = Some(Instant::now()); } self.output.extend(format!("\n\n{}\n\n", reason).as_bytes()); self.truncated = true; Ok(()) } pub async fn next_wakeup( &mut self, child: &mut Child, stdout_open: &mut bool, stderr_open: &mut bool, ) -> Result { // check if we need to SIGKILL due to SIGTERM timeout if let Some(sigterm_sent) = self.sigterm_sent { if sigterm_sent.elapsed() > Duration::from_secs(SIGKILL_DELAY) { if let Some(pid) = child.id() { warn!( "child(pid={}) didn't terminate {}s after SIGTERM, sending SIGKILL", pid, SIGKILL_DELAY ); // child.id is going to return None after this Self::kill(pid, Signal::SIGKILL)?; *stdout_open = false; *stderr_open = false; } } } // check if the process timed out and we need to SIGTERM if let Some(remaining) = self.timeout.checked_sub(self.start.elapsed()) { return Ok(remaining); } else if self.sigterm_sent.is_none() { // the process has timed out, sending SIGTERM warn!("child timed out, killing..."); let msg = format!( "TRUNCATED DUE TO TIMEOUT: {} seconds", self.timeout.as_secs() ); self.truncate(child, &msg, true).await?; } // if we don't need any timeouts anymore we just return any value Ok(Duration::from_secs(SIGKILL_DELAY)) } } pub async fn run(bin: &Path, args: I, opts: Options, log: &mut Vec) -> Result where I: IntoIterator + fmt::Debug, S: AsRef, { info!("Running {:?} {:?}", bin, args); let mut cmd = Command::new(bin); cmd.args(args) .stdin(Stdio::null()) .stdout(Stdio::piped()) .stderr(Stdio::piped()) .envs(&opts.envs); unsafe { cmd.pre_exec(|| { // create a new process group let pid = nix::unistd::getpid(); if let Err(err) = nix::unistd::setpgid(pid, Pid::from_raw(0)) { warn!("Failed to create new process group: {:#?}", err); } Ok(()) }); } let mut child = cmd.spawn()?; let mut child_stdout = child.stdout.take().unwrap(); let mut child_stderr = child.stderr.take().unwrap(); let mut buf_stdout = [0u8; 4096]; let mut buf_stderr = [0u8; 4096]; let mut stdout = tokio::io::stdout(); let mut stderr = tokio::io::stderr(); let passthrough = opts.passthrough; let mut stdout_open = true; let mut stderr_open = true; let mut cap = capture(log, opts); let success = loop { let remaining = cap .next_wakeup(&mut child, &mut stdout_open, &mut stderr_open) .await?; if stdout_open || stderr_open { select! { n = child_stdout.read(&mut buf_stdout).fuse() => { let n = n?; trace!("read stdout: {}", n); if n == 0 { stdout_open = false; } else { cap.push_bytes(&mut child, &buf_stdout[..n]).await?; if passthrough { stdout.write_all(&buf_stdout[..n]).await?; } } }, n = child_stderr.read(&mut buf_stderr).fuse() => { let n = n?; trace!("read stderr: {}", n); if n == 0 { stderr_open = false; } else { cap.push_bytes(&mut child, &buf_stderr[..n]).await?; if passthrough { stderr.write_all(&buf_stderr[..n]).await?; } } }, _ = time::sleep(remaining).fuse() => continue, } } else { select! { status = child.wait().fuse() => { let status = status?; info!("{:?} exited with exit={}, captured {} bytes", bin, status, log.len()); break status.success(); } _ = time::sleep(remaining).fuse() => continue, } } }; Ok(success) } #[cfg(test)] mod tests { use super::*; async fn script(script: &str, opts: Options) -> Result<(bool, String, Duration)> { let start = Instant::now(); let path = Path::new("sh"); let mut output = Vec::new(); let success = run(path, &["-c", script], opts, &mut output).await?; let duration = start.elapsed(); let output = String::from_utf8_lossy(&output).into_owned(); Ok((success, output, duration)) } #[tokio::test] async fn hello_world() { let (success, output, _) = script( "/bin/echo hello world", Options { timeout: Duration::from_secs(600), size_limit: None, kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(success); assert_eq!(output, "hello world\n"); } #[tokio::test] async fn size_limit_no_kill() { let (success, output, _) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA done ", Options { timeout: Duration::from_secs(600), size_limit: Some(50), kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n"); } #[tokio::test] async fn size_limit_kill() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 0.5 done ", Options { timeout: Duration::from_secs(600), size_limit: Some(50), kill_at_size_limit: true, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(5)); } #[tokio::test] async fn timeout() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 1 done ", Options { timeout: Duration::from_millis(1500), size_limit: None, kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO TIMEOUT: 1 seconds\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(3)); } #[tokio::test] async fn size_limit_no_kill_but_timeout() { let (success, output, duration) = script( " for x in `seq 100`; do /bin/echo AAAAAAAAAAAAAAAAAAAAAAAA sleep 0.1 done ", Options { timeout: Duration::from_millis(1500), size_limit: Some(50), kill_at_size_limit: false, passthrough: false, envs: HashMap::new(), }, ) .await .unwrap(); assert!(!success); assert_eq!(output, "AAAAAAAAAAAAAAAAAAAAAAAA\nAAAAAAAAAAAAAAAAAAAAAAAA\n\n\nTRUNCATED DUE TO SIZE LIMIT: 50 bytes\n\n\n\nTRUNCATED DUE TO TIMEOUT: 1 seconds\n\n"); assert!(duration > Duration::from_secs(1)); assert!(duration < Duration::from_secs(2)); } } rebuilderd-worker-0.24.0/src/rebuild.rs000064400000000000000000000221261046102023000161250ustar 00000000000000use crate::config; use crate::diffoscope::diffoscope; use crate::download::download; use crate::heartbeat::HeartBeat; use crate::proc; use in_toto::crypto::PrivateKey; use in_toto::runlib::in_toto_run; use rebuilderd_common::api::{BuildStatus, Rebuild}; use rebuilderd_common::errors::Context as _; use rebuilderd_common::errors::*; use rebuilderd_common::PkgArtifact; use std::collections::HashMap; use std::fs; use std::io::ErrorKind; use std::path::Path; use std::time::Duration; use tokio::fs::File; use tokio::io::AsyncReadExt; use tokio::select; use tokio::time; pub struct Context<'a> { pub artifacts: Vec, pub input_url: Option, pub backend: config::Backend, pub build: config::Build, pub diffoscope: config::Diffoscope, pub privkey: &'a PrivateKey, } fn path_to_string(path: &Path) -> Result { let s = path .to_str() .with_context(|| anyhow!("Path contains invalid characters: {:?}", path))?; Ok(s.to_string()) } pub async fn compare_files(a: &Path, b: &Path) -> Result { let mut buf1 = [0u8; 4096]; let mut buf2 = [0u8; 4096]; info!("Comparing {:?} with {:?}", a, b); let mut f1 = File::open(a) .await .with_context(|| anyhow!("Failed to open {:?}", a))?; let mut f2 = File::open(b) .await .with_context(|| anyhow!("Failed to open {:?}", b))?; let mut pos = 0; loop { // read up to 4k bytes from the first file let n = f1.read_buf(&mut &mut buf1[..]).await?; // check if the first file is end-of-file if n == 0 { debug!("First file is at end-of-file"); // check if other file is eof too let n = f2.read_buf(&mut &mut buf2[..]).await?; if n > 0 { info!("Files are not identical, {:?} is longer", b); return Ok(false); } else { return Ok(true); } } // check the same chunk in the other file match f2.read_exact(&mut buf2[..n]).await { Ok(n) => n, Err(err) if err.kind() == ErrorKind::UnexpectedEof => { info!("Files are not identical, {:?} is shorter", b); return Ok(false); } err => err?, }; if buf1[..n] != buf2[..n] { // get the exact position // this can't panic because we've already checked the slices are not equal let pos = pos + buf1[..n] .iter() .zip(buf2[..n].iter()) .position(|(a, b)| a != b) .unwrap(); info!("Files {:?} and {:?} differ at position {}", a, b, pos); return Ok(false); } // advance the number of bytes that are equal pos += n; } } pub async fn rebuild_with_heartbeat( ctx: &Context<'_>, log: &mut Vec, hb: &dyn HeartBeat, ) -> Result> { let mut rebuild = Box::pin(rebuild(ctx, log)); loop { select! { res = &mut rebuild => { return res; }, _ = time::sleep(hb.interval()) => hb.ping().await?, } } } pub async fn rebuild(ctx: &Context<'_>, log: &mut Vec) -> Result> { // setup let tmp = tempfile::Builder::new().prefix("rebuilderd").tempdir()?; let inputs_dir = tmp.path().join("inputs"); fs::create_dir(&inputs_dir).context("Failed to create inputs/ temp dir")?; let out_dir = tmp.path().join("out"); fs::create_dir(&out_dir).context("Failed to create out/ temp dir")?; // download let mut artifacts = Vec::new(); for artifact in &ctx.artifacts { let artifact_filename = download(&artifact.url, &inputs_dir) .await .with_context(|| { anyhow!( "Failed to download original package from {:?}", artifact.url ) })?; let artifact_path = inputs_dir.join(&artifact_filename); artifacts.push((artifact.clone(), artifact_filename, artifact_path)); } let input_filename = if let Some(input_url) = &ctx.input_url { download(input_url, &inputs_dir) .await .with_context(|| anyhow!("Failed to download build input from {:?}", input_url))? } else { artifacts .first() .context("Failed to use first artifact as build input")? .1 .to_owned() }; let input_path = inputs_dir.join(&input_filename); // rebuild verify(ctx, log, &out_dir, &input_path).await?; // process results let mut results = Vec::new(); for (artifact, artifact_filename, artifact_path) in artifacts { let output_path = out_dir.join(&artifact_filename); let result = if !output_path.exists() { info!( "No output artifact found, marking as BAD: {:?}", output_path ); Rebuild::new(BuildStatus::Bad) } else if compare_files(&artifact_path, &output_path).await? { info!( "Output artifacts is identical, marking as GOOD: {:?}", output_path ); let mut res = Rebuild::new(BuildStatus::Good); info!("Generating signed link"); match in_toto_run( &format!("rebuild {}", artifact_filename.to_str().unwrap()), None, &[input_path .to_str() .ok_or_else(|| anyhow!("Input path contains invalid characters"))?], &[output_path .to_str() .ok_or_else(|| anyhow!("Output path contains invalid characters"))?], &[], Some(ctx.privkey), Some(&["sha512", "sha256"]), Some(&[ &format!("{}/", inputs_dir.to_str().unwrap()), &format!("{}/", out_dir.to_str().unwrap()), ]), ) { Ok(signed_link) => { info!("Signed link generated"); let attestation = serde_json::to_string(&signed_link) .context("Failed to serialize attestation")?; res.attestation = Some(attestation); } Err(err) => warn!("Failed to generate in-toto attestation: {:#?}", err), } res } else { info!("Output artifact differs, marking as BAD: {:?}", output_path); let mut res = Rebuild::new(BuildStatus::Bad); // generate diffoscope diff if enabled if ctx.diffoscope.enabled { let diff = diffoscope(&artifact_path, &output_path, &ctx.diffoscope) .await .context("Failed to run diffoscope")?; res.diffoscope = Some(diff); } res }; results.push((artifact, result)); } Ok(results) } async fn verify( ctx: &Context<'_>, log: &mut Vec, out_dir: &Path, input_path: &Path, ) -> Result<()> { let bin = &ctx.backend.path; let timeout = ctx.build.timeout.unwrap_or(3600 * 24); // 24h let mut envs = HashMap::new(); envs.insert("REBUILDERD_OUTDIR".into(), path_to_string(out_dir)?); let opts = proc::Options { timeout: Duration::from_secs(timeout), size_limit: ctx.build.max_bytes, kill_at_size_limit: false, passthrough: !ctx.build.silent, envs, }; proc::run(bin.as_ref(), &[input_path], opts, log).await?; Ok(()) } #[cfg(test)] mod tests { use super::*; #[tokio::test] async fn compare_files_equal() { let equal = compare_files(Path::new("src/main.rs"), Path::new("src/main.rs")) .await .unwrap(); assert!(equal); } #[tokio::test] async fn compare_files_not_equal1() { let equal = compare_files(Path::new("src/main.rs"), Path::new("Cargo.toml")) .await .unwrap(); assert!(!equal); } #[tokio::test] async fn compare_files_not_equal2() { let equal = compare_files(Path::new("Cargo.toml"), Path::new("src/main.rs")) .await .unwrap(); assert!(!equal); } #[tokio::test] async fn compare_large_files_equal() { let dir = tempfile::tempdir().unwrap(); fs::write(dir.path().join("a"), [0u8; 4096 * 100]).unwrap(); fs::write(dir.path().join("b"), [0u8; 4096 * 100]).unwrap(); let equal = compare_files(&dir.path().join("a"), &dir.path().join("b")) .await .unwrap(); assert!(equal); } #[tokio::test] async fn compare_large_files_not_equal() { let dir = tempfile::tempdir().unwrap(); fs::write(dir.path().join("a"), [0u8; 4096 * 100]).unwrap(); fs::write(dir.path().join("b"), [1u8; 4096 * 100]).unwrap(); let equal = compare_files(&dir.path().join("a"), &dir.path().join("b")) .await .unwrap(); assert!(!equal); } } rebuilderd-worker-0.24.0/src/setup.rs000064400000000000000000000004731046102023000156400ustar 00000000000000use rebuilderd_common::errors::*; use std::env; use std::fs; pub fn run(name: &str) -> Result<()> { let work_dir = format!("/var/lib/rebuilderd-worker/{}", name); info!("switching into work directory: {}", work_dir); fs::create_dir_all(&work_dir)?; env::set_current_dir(&work_dir)?; Ok(()) }