mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-30 07:33:59 +08:00
87 lines
2.2 KiB
TOML
87 lines
2.2 KiB
TOML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
[package]
|
|
name = "openshell-sandbox"
|
|
description = "OpenShell process sandbox and monitor"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
rust-version.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
|
|
[[bin]]
|
|
name = "openshell-sandbox"
|
|
path = "src/main.rs"
|
|
|
|
[[bin]]
|
|
name = "openshell-seccomp-perf"
|
|
path = "src/bin/seccomp-perf.rs"
|
|
required-features = ["perf-harness"]
|
|
|
|
[features]
|
|
perf-harness = []
|
|
|
|
[dependencies]
|
|
openshell-core = { path = "../openshell-core", default-features = false }
|
|
openshell-binary-identity = { path = "../openshell-binary-identity" }
|
|
openshell-isolation-interface = { path = "../openshell-isolation-interface" }
|
|
openshell-sandbox-backend = { path = "../openshell-sandbox-backend" }
|
|
openshell-ocsf = { path = "../openshell-ocsf" }
|
|
openshell-policy = { path = "../openshell-policy" }
|
|
|
|
anyhow = { workspace = true }
|
|
async-trait = "0.1"
|
|
bytes = { workspace = true }
|
|
hex = "0.4"
|
|
ipnet = "2"
|
|
rand = "0.10"
|
|
sha2 = { workspace = true }
|
|
|
|
# Async runtime
|
|
tokio = { workspace = true }
|
|
tokio-stream = { workspace = true }
|
|
tonic = { workspace = true }
|
|
|
|
# CLI
|
|
clap = { workspace = true }
|
|
|
|
# Error handling
|
|
miette = { workspace = true }
|
|
|
|
# Unix identity and bootstrap ownership
|
|
nix = { workspace = true, features = ["resource", "socket", "feature", "poll"] }
|
|
|
|
# TLS crypto provider install (main.rs)
|
|
rustls = { workspace = true }
|
|
rustls-pemfile = { workspace = true }
|
|
tokio-rustls = { workspace = true }
|
|
|
|
# Serialization (serde_json::json! for OCSF unmapped fields)
|
|
base64 = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
|
|
# Logging
|
|
tracing = { workspace = true }
|
|
tracing-subscriber = { workspace = true }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
libc = "0.2"
|
|
rustix = { workspace = true, features = ["termios", "fs", "process", "net", "event"] }
|
|
russh-sftp = "3.0"
|
|
uuid = { workspace = true }
|
|
|
|
[target.'cfg(target_os = "linux")'.dependencies]
|
|
landlock = "0.4"
|
|
seccompiler = "0.5"
|
|
socket2 = { workspace = true, features = ["all"] }
|
|
tempfile = "3"
|
|
|
|
[dev-dependencies]
|
|
rcgen = { workspace = true }
|
|
tempfile = "3"
|
|
|
|
[lints]
|
|
workspace = true
|