crates/heimdall-cli/Cargo.toml
[package]
name = "nordisk-heimdall-cli"
description = "Heimdall is a defensive sandbox: the heimdall command line (run a wasm job, verify a signed result, probe/gen/check syscall profiles)."
version.workspace = true
edition.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
readme.workspace = true
rust-version.workspace = true
keywords = ["sandbox","wasm","security","cli"]
categories = ["command-line-utilities","wasm"]
[package.metadata.docs.rs]
targets = ["x86_64-unknown-linux-gnu"]
[features]
# Tests only (crates/heimdall-cli/tests/genprof.rs builds its own release
# binary with it): HEIMDALL_TEST_WORKER_CALL=socket makes the `heimdall run`
# worker make a call outside its seccomp profile. Never in a shipped binary.
test-hooks = []
[[bin]]
name = "heimdall"
path = "src/main.rs"
[dependencies]
heimdall-core = { package = "nordisk-heimdall-core", path = "../heimdall-core", version = "0.3.0" }
heimdall-run = { package = "nordisk-heimdall-run", path = "../heimdall-run", version = "0.3.0" }
heimdall-probe = { package = "nordisk-heimdall-probe", path = "../heimdall-probe", version = "0.3.0" }
heimdall-seccomp = { package = "nordisk-heimdall-seccomp", path = "../heimdall-seccomp", version = "0.3.0" }
heimdall-profiles = { package = "nordisk-heimdall-profiles", path = "../../profiles", version = "0.3.0" }
heimdall-trace = { package = "nordisk-heimdall-trace", path = "../heimdall-trace", version = "0.3.0" }
# `heimdall profile probe-container`: the protected runner (its shim is the
# separate heimdall-container-shim binary, feature `youki` there).
heimdall-container = { package = "nordisk-heimdall-container", path = "../heimdall-container", version = "0.3.0" }
serde_json = "1"
clap = { version = "4", features = ["derive"] }
libc = "0.2"
[dev-dependencies]
tempfile = "3"
# tests/probe_container.rs builds OCI layouts with heimdall-plain's test kit.
tar = "0.4"
flate2 = "1"
# The real-guest end-to-end tests reuse heimdall-wasm's test kit
# (tests/common/mod.rs): WAT guests componentized and signed with a throwaway CA.
heimdall-wasm = { package = "nordisk-heimdall-wasm", path = "../heimdall-wasm", version = "0.3.0" }
guest-host = { version = "0.2.1", default-features = false, features = ["verify-modules"] }
blake3 = "1"
sha2 = "0.10"
wat = "1.258.3"
wit-component = "0.258.3"
wit-parser = "0.258.3"