lanzaboote/rust/tool/Cargo.toml

[package]
name = "lanzaboote_tool"
version = "0.1.0"
edition = "2021"

[[bin]]
name = "lzbt"
path = "src/main.rs"

# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

[dependencies]
anyhow = "1.0.66"
clap = { version = "4.0.26", features = ["derive"] }
goblin = "0.6.0"
nix = { version = "0.25.0", default-features = false, features = [ "fs" ] }
serde = { version = "1.0.151", features = ["derive"] }
serde_json = "1.0.89"
tempfile = "3.3.0"
# TODO: wait for a upstream release and pin it.
bootspec = { git = "https://github.com/DeterminateSystems/bootspec" }
walkdir = "2.3.2"
time = "0.3.17"
sha2 = "0.10.6"
# Keep the fastrand version aligned with the one from tempfile to avoid two
# different versions.
fastrand = "1.6.0"

[dev-dependencies]
assert_cmd = "2.0.7"
expect-test = "1.4.0"
filetime = "0.2.19"
rand = "0.8.5"
lanzatool: init 2022-11-21 18:29:16 -06:00			`[package]`
treewide: simplify subproject names Lanzatool is renamed to 'tool' and lanzaboote is renamed to 'stub'. The name of the lanzatool binary is now 'lzbt' standing for LanZaBooteTool. 2023-01-13 15:10:40 -06:00			`name = "lanzaboote_tool"`
lanzatool: init 2022-11-21 18:29:16 -06:00			`version = "0.1.0"`
			`edition = "2021"`

treewide: simplify subproject names Lanzatool is renamed to 'tool' and lanzaboote is renamed to 'stub'. The name of the lanzatool binary is now 'lzbt' standing for LanZaBooteTool. 2023-01-13 15:10:40 -06:00			`[[bin]]`
			`name = "lzbt"`
			`path = "src/main.rs"`

lanzatool: init 2022-11-21 18:29:16 -06:00			`# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html`

			`[dependencies]`
			`anyhow = "1.0.66"`
			`clap = { version = "4.0.26", features = ["derive"] }`
lanzatool.install: init 2022-11-23 08:26:26 -06:00			`goblin = "0.6.0"`
lanzatool: sync for every sign operation 2022-11-25 16:57:56 -06:00			`nix = { version = "0.25.0", default-features = false, features = [ "fs" ] }`
lanzatool(bootspec): introduce DetSys's bootspec library 2022-12-17 16:55:38 -06:00			`serde = { version = "1.0.151", features = ["derive"] }`
lanzatool.install: init 2022-11-23 08:26:26 -06:00			`serde_json = "1.0.89"`
lanzatool: improve tempfiles and error handling in pe 2022-11-25 08:15:58 -06:00			`tempfile = "3.3.0"`
lanzatool(bootspec): introduce DetSys's bootspec library 2022-12-17 16:55:38 -06:00			`# TODO: wait for a upstream release and pin it.`
Cargo.toml: update bootspec to upstream 2022-12-22 18:03:32 -06:00			`bootspec = { git = "https://github.com/DeterminateSystems/bootspec" }`
lanzatool: add walkdir dependency 2022-12-11 19:09:04 -06:00			`walkdir = "2.3.2"`
lanzatool: generate custom os-release 2023-01-01 18:54:57 -06:00			`time = "0.3.17"`
treewide: blake3 -> sha256 Using the sha2 crate instead of blake3 decreases the binary size of the stub by around 50%. 2023-01-13 19:31:31 -06:00			`sha2 = "0.10.6"`
tool: use random names for secure tempfiles Using random names for tempfiles makes handling them easier. It reduces the amount of noise in the code because no custom name needs to be provided for each tempfile. The names were not really useful in any case. It also does not burden the developer with ensuring uniqueness of names. This is relevant when files for multiple generations need to be stored in the same directory (e.g. because they need to be accessed after handling one generation). Out of an abundance of caution, 32 random alphanumeric characters are chosen for each filename. The tempfile crate, in comparison, only chooses 8. 32 characters should be enough to avoid collisions, even if the PRNG is not of cryptographic quality. 2023-02-13 18:49:10 -06:00			`# Keep the fastrand version aligned with the one from tempfile to avoid two`
			`# different versions.`
			`fastrand = "1.6.0"`
lanzatool: add assert_cmd dev dependency 2022-12-29 18:41:20 -06:00
			`[dev-dependencies]`
			`assert_cmd = "2.0.7"`
lanzatool: generate custom os-release 2023-01-01 18:54:57 -06:00			`expect-test = "1.4.0"`
			`filetime = "0.2.19"`
lanzatool: add rand dev dependency 2022-12-29 18:41:48 -06:00			`rand = "0.8.5"`