WIP

Author: jplock

enclave/Cargo.toml

@@ -13,14 +13,14 @@ name = "enclave-vault"
 path = "src/main.rs"
 
 [dependencies]
-anyhow = { version = "1.0.92", default-features = false }
-aws-lc-rs = { version = "1.10.0", default-features = false }
-byteorder = { version = "1.5.0", default-features = false }
-cel-interpreter = { version = "0.9.0", default-features = false, features = ["json", "chrono"] }
-chrono = { version = "0.4.38", default-features = false, features = ["now"] }
-data-encoding = { version = "2.6.0", default-features = false, features = ["alloc"] }
-serde = { version = "1.0.214", default-features = false, features = ["derive"] }
-serde_json = { version = "1.0.132", default-features = false }
-rustls = { version = "0.23.16", default-features = false, features = ["aws_lc_rs"] }
-vsock = { version = "0.5.1", default-features = false }
-zeroize = { version = "1.8.1", default-features = false, features = ["zeroize_derive"] }
+anyhow = { version = "=1.0.92", default-features = false }
+aws-lc-rs = { version = "=1.10.0", default-features = false }
+byteorder = { version = "=1.5.0", default-features = false }
+cel-interpreter = { version = "=0.9.0", default-features = false, features = ["json", "chrono"] }
+chrono = { version = "=0.4.38", default-features = false, features = ["now"] }
+data-encoding = { version = "=2.6.0", default-features = false, features = ["alloc"] }
+serde = { version = "=1.0.214", default-features = false, features = ["derive"] }
+serde_json = { version = "=1.0.132", default-features = false }
+rustls = { version = "=0.23.16", default-features = false, features = ["aws_lc_rs"] }
+vsock = { version = "=0.5.1", default-features = false }
+zeroize = { version = "=1.8.1", default-features = false, features = ["zeroize_derive"] }

enclave/Dockerfile

@@ -174,7 +174,7 @@ COPY --from=planner /app/recipe.json recipe.json
 RUN cargo install cargo-chef --locked
 RUN cargo chef cook --release --target $TARGETPLATFORM --recipe-path recipe.json
 COPY . .
-RUN cargo build --target $TARGETPLATFORM --release --color never
+RUN cargo build --target $TARGETPLATFORM --release --color never --locked
 
 ####################################################################################################
 ## Final image

parent/Cargo.toml

@@ -14,18 +14,18 @@ name = "parent-vault"
 path = "src/main.rs"
 
 [dependencies]
-anyhow = { version = "1.0.92", default-features = false }
-aws-config = { version = "1.5.9", default-features = false, features = ["rustls", "rt-tokio", "behavior-version-latest"] }
-aws-credential-types = { version = "1.2.1", default-features = false }
-axum = { version = "0.7.7", default-features = false, features = ["http1", "json", "tokio", "tracing"] }
-byteorder = { version = "1.5.0", default-features = false }
-clap = { version = "4.5.20", default-features = false, features = ["std", "derive", "env"] }
-rand = { version = "0.8.5", default-features = false, features = ["std", "std_rng"] }
-serde = { version = "1.0.214", default-features = false, features = ["derive"] }
-serde_json = { version = "1.0.132", default-features = false }
-thiserror = { version = "1.0.66", default-features = false }
-tokio = { version = "1.41.0", default-features = false, features = ["rt-multi-thread", "process", "tracing"] }
-tracing = { version = "0.1.40", default-features = false, features = ["log"] }
-tracing-subscriber = { version = "0.3.18", default-features = false, features = ["ansi", "env-filter", "fmt", "json"] }
-vsock = { version = "0.5.1", default-features = false }
-zeroize = { version = "1.8.1", default-features = false, features = ["zeroize_derive"] }
+anyhow = { version = "=1.0.92", default-features = false }
+aws-config = { version = "=1.5.9", default-features = false, features = ["rustls", "rt-tokio", "behavior-version-latest"] }
+aws-credential-types = { version = "=1.2.1", default-features = false }
+axum = { version = "=0.7.7", default-features = false, features = ["http1", "json", "tokio", "tracing"] }
+byteorder = { version = "=1.5.0", default-features = false }
+clap = { version = "=4.5.20", default-features = false, features = ["std", "derive", "env"] }
+rand = { version = "=0.8.5", default-features = false, features = ["std", "std_rng"] }
+serde = { version = "=1.0.214", default-features = false, features = ["derive"] }
+serde_json = { version = "=1.0.132", default-features = false }
+thiserror = { version = "=1.0.66", default-features = false }
+tokio = { version = "=1.41.0", default-features = false, features = ["rt-multi-thread", "process", "tracing"] }
+tracing = { version = "=0.1.40", default-features = false, features = ["log"] }
+tracing-subscriber = { version = "=0.3.18", default-features = false, features = ["ansi", "env-filter", "fmt", "json"] }
+vsock = { version = "=0.5.1", default-features = false }
+zeroize = { version = "=1.8.1", default-features = false, features = ["zeroize_derive"] }

parent/Dockerfile

@@ -29,7 +29,7 @@ COPY --from=planner /app/recipe.json recipe.json
 RUN cargo install cargo-chef --locked
 RUN cargo chef cook --release --target $TARGETPLATFORM --recipe-path recipe.json
 COPY . .
-RUN cargo build --target $TARGETPLATFORM --release --color never
+RUN cargo build --target $TARGETPLATFORM --release --color never --locked
 
 ####################################################################################################
 ## Final image