DefGuard / DefGuard/defguard

Air-gapped builds using Cargo

Open
#1,468 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Rust
Stars
2.8k
Forks
115
Avg merge
1d 4h
Merged PRs (30d)
51

Description

1. Modify the cargo build process to only use a local mirror.
2. Cargo never reaches the internet for packages.
3. Use https://kellnr.io for the mirror.

Possible development workflow:
1. Developer uploads the dependencies to Kellnr. The developer checks the dependencies manually, or there's an automatic check before the upload.
2. Developer creates a PR with a modified Cargo.lock.
3. An automatic job checks all dependencies from Cargo.lock for security issues.
4. If passed, an automatic job updates Kellnr with new dependencies.
5. The solution gets built using Kellnr as crates mirror. Cargo can be configured to operate on a replaced creates https://doc.rust-lang.org/cargo/reference/source-replacement.html#configuration

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.