Replace address-only trust and pushed peer state with installation identities, SPKI-pinned QUIC, candidate-only discovery, and bounded responder-owned protocol-8 pulls. The runtime now owns each network generation and all admitted work through shutdown. Add exact bundled content identities, reproducible manifest publishing, capability-confined downloads, streaming BLAKE3 verification, quarantine and retry, and crash-recoverable download and install transactions. Ship generated fixture catalogs and fail closed when production manifests are absent. The Tauri backend exposes durable sharing policy, redacted identity state, and attempt-keyed transfer snapshots. Frontend consumption follows in the next commit. Repository-wide test certificates and protocol-7 paths are removed. BREAKING CHANGE: peers must use protocol 8 and exact catalog content artifacts; protocol-7 frames and shared-certificate identities are no longer accepted. Test Plan: - `just test` -- passed on the completed stack (708 workspace tests) - `just clippy` -- passed on the completed stack - `just build` -- passed with fixture catalogs on the completed stack - `just catalog-check-production` -- failed closed because the external production manifest corpus is absent - `git diff --cached --check` -- passed
21 lines
798 B
Docker
21 lines
798 B
Docker
FROM rust:1-bookworm AS build
|
|
|
|
WORKDIR /work
|
|
COPY . .
|
|
RUN cargo build --release -p lanspread-peer-cli
|
|
|
|
FROM debian:trixie-slim
|
|
|
|
RUN apt-get update \
|
|
&& apt-get install -y --no-install-recommends ca-certificates libstdc++6 \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
COPY --from=build /work/target/release/lanspread-peer-cli /usr/local/bin/lanspread-peer-cli
|
|
COPY crates/lanspread-peer-cli/catalogs/default/game.db /app/game.db
|
|
COPY crates/lanspread-peer-cli/catalogs/default/manifests /app/manifests
|
|
COPY crates/lanspread-tauri-deno-ts/src-tauri/binaries/unrar-x86_64-unknown-linux-gnu /usr/local/bin/unrar
|
|
RUN chmod +x /usr/local/bin/unrar
|
|
|
|
ENTRYPOINT ["lanspread-peer-cli"]
|
|
CMD ["--games-dir", "/games", "--state-dir", "/state", "--catalog-db", "/app/game.db", "--manifests-dir", "/app/manifests"]
|