Zanie Blue
9345450b4c
Inspired by #18252 This required an upstream change https://github.com/rust-secure-code/cargo-auditable/pull/245 which is now released. This increases binary sizes slightly, ~4KB. The cargo wrapper implementation will be extended in #18280 to code sign binaries.
32 lines
934 B
Bash
Executable File
32 lines
934 B
Bash
Executable File
#!/usr/bin/env sh
|
|
## Install cargo extensions for release builds.
|
|
##
|
|
## Installs cargo-auditable for SBOM embedding.
|
|
##
|
|
## Includes handling for cross-build containers in our release workflow.
|
|
##
|
|
## Usage:
|
|
##
|
|
## $ scripts/install-cargo-extensions.sh
|
|
##
|
|
## Expected to be used with `scripts/cargo.sh`.
|
|
|
|
set -eu
|
|
|
|
CARGO_AUDITABLE_INSTALL="cargo install cargo-auditable \
|
|
--locked \
|
|
--version 0.7.4"
|
|
|
|
# In Linux containers running on x86_64, build a static musl binary so the installed tool works in
|
|
# musl-based environments (Alpine, etc.).
|
|
#
|
|
# On i686 containers the 32-bit linker can't produce 64-bit musl binaries, so we fall back to a
|
|
# default build.
|
|
if [ "$(uname -m 2>/dev/null)" = "x86_64" ] && [ "$(uname -s 2>/dev/null)" = "Linux" ]; then
|
|
MUSL_TARGET="x86_64-unknown-linux-musl"
|
|
rustup target add "$MUSL_TARGET"
|
|
CC=gcc $CARGO_AUDITABLE_INSTALL --target "$MUSL_TARGET"
|
|
else
|
|
$CARGO_AUDITABLE_INSTALL
|
|
fi
|