Add in-toto app - #284
Draft
rishabhBudhouliya wants to merge 2 commits into
Draft
Add in-toto app#284rishabhBudhouliya wants to merge 2 commits into
rishabhBudhouliya wants to merge 2 commits into
Conversation
rishabhBudhouliya
force-pushed
the
in-toto-port
branch
from
September 11, 2026 04:08
15868f2 to
693e402
Compare
rishabhBudhouliya
marked this pull request as draft
September 11, 2026 13:20
Yaxuan-w
reviewed
Sep 13, 2026
Yaxuan-w
left a comment
Yaxuan-w
left a comment
Member
There was a problem hiding this comment.
Thanks! We probably need to discuss whether to create separate folders to distinguish C apps with Rust apps. Also would be good to split compilation scripts to another PR for future track
- `run -- <cmd>`: fork/execv/waitpid the step command, record its exit status and argv in the link. std::process is unsupported on wasm32-wasip1. - `gen-layout`: step names, artifacts and expected command are now options; defaults keep the write-code/package demo. - examples/gcc-imfs.sh: in-toto forks gcc under one IMFS grate, signs the ELF hash, verifies the chain, and rejects a tampered hello.c. - run_tests.sh: add a fork/exec child test (7 checks, native and lind). - README: rewrite for brevity.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Runs the Rust
in-totocrate on lind-wasm. This is the first Rust application in this repo; it is built with cargo-Z build-stdonwasm32-wasip1linked against lind-glibc throughwasip1-clang.sh, the same path the Rust grates use.What is added
in-toto/in-toto-cli: thin CLI over the crate withkeygen,run,gen-layout,verify.runrecords and signs artifacts with an empty command list becausestd::processis unsupported on wasm32-wasip1.in-toto/compile_in-toto.sh: inlines thecargo-lind_compilerecipe without its swallowed wasm-opt/precompile errors, drops the grate-only--export=pass_fptr_to_wt, and setsCC_wasm32_wasip1/CFLAGS_wasm32_wasip1so ring's C objects carry atomics+bulk-memory for--shared-memory.in-toto/run_tests.sh: keygen,write-codelink,packagelink, signed layout,verify, tamperfoo.pyand re-run .--nativeruns the host build for a golden comparison.in-totoandinstall-in-toto,expected-binaries.txt,clean.sh, README.