mirror of
https://github.com/marcoallegretti/karapace.git
synced 2026-03-26 21:43:09 +00:00
22 lines
826 B
TOML
22 lines
826 B
TOML
|
# Supply-chain hardening: deterministic builds
|
||
|
|
#
|
||
|
|
# Path remapping eliminates local filesystem paths from binaries.
|
||
|
|
# CI sets RUSTFLAGS env var which OVERRIDES build.rustflags below.
|
||
|
|
# SOURCE_DATE_EPOCH=0 ensures no build timestamps leak.
|
||
|
|
#
|
||
|
|
# NOTE: Local dev builds use build.rustflags for path remapping.
|
||
|
|
# CI builds use the RUSTFLAGS env var instead (takes precedence).
|
||
|
|
# This means local builds get local remapping, CI gets CI remapping.
|
||
|
|
|
||
|
|
[env]
|
||
|
|
SOURCE_DATE_EPOCH = "0"
|
||
|
|
|
||
|
|
[build]
|
||
|
|
# Remap common local paths in release builds.
|
||
|
|
# These are best-effort for local dev — CI RUSTFLAGS override this entirely.
|
||
|
|
# The $HOME/.cargo/registry/src prefix covers most dependency crate paths.
|
||
|
|
rustflags = [
|
||
|
|
"--remap-path-prefix", "/home/lateuf/.cargo/registry/src=crate",
|
||
|
|
"--remap-path-prefix", "/home/lateuf/Projects/Karapace=src",
|
||
|
|
]
|