a20596fa59
init prints the store's keys and root token once and keeps none; with --and-grant it goes on to the granter bootstrap in the same process. grant-bootstrap does that step alone, reading the root token from a hidden prompt or stdin. The token reaches bao only as BAO_TOKEN in the child's environment.
46 lines
1.4 KiB
TOML
46 lines
1.4 KiB
TOML
[package]
|
|
name = "swarmctl"
|
|
version.workspace = true
|
|
readme = "README.md"
|
|
edition.workspace = true
|
|
|
|
[[bin]]
|
|
name = "swarmctl"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
anyhow.workspace = true
|
|
# PKCE verifier, state and S256 challenge for `swarmctl login`.
|
|
base64.workspace = true
|
|
chrono.workspace = true
|
|
# `agent create` — bare HTTP/1.1 client over swarm-controller's unix
|
|
# socket. No new workspace dependency: `bytes`, `http-body-util`,
|
|
# `hyper` and `hyper-util` are all already pinned in the root manifest.
|
|
bytes = "1"
|
|
clap.workspace = true
|
|
clap-markdown = "0.1"
|
|
clap_complete.workspace = true
|
|
getrandom.workspace = true
|
|
hive-types.workspace = true
|
|
http-body-util.workspace = true
|
|
# `server`: the loopback listener `swarmctl login` receives its code on.
|
|
hyper = { workspace = true, features = ["server"] }
|
|
hyper-util.workspace = true
|
|
# HTTPS to the swarm domain and its SSO provider, for `--swarm`.
|
|
reqwest.workspace = true
|
|
# `flock` on the login cache, which a refresh must not race.
|
|
rustix.workspace = true
|
|
serde.workspace = true
|
|
serde_json.workspace = true
|
|
serde_norway = "0.9.42"
|
|
sha2.workspace = true
|
|
# The request and response bodies, shared with swarm-controller.
|
|
swarm-controller-api.workspace = true
|
|
# `AgentState`, the values `agent set-state` takes.
|
|
swarm-wire.workspace = true
|
|
tokio.workspace = true
|
|
url.workspace = true
|
|
zeroize.workspace = true
|
|
|
|
[lints]
|
|
workspace = true
|