Separating out the Policy Store, Policy Reasoner and API

Cargo.toml

@@ -25,7 +25,8 @@ members = [
     # These crates implement services for worker nodes
     "brane-job",
     "brane-reg",
-    "brane-let",
+    "brane-chk",
+    "brane-let", # Not a service, container-local binary
 
     # These crates implement services that occur on any type of node
     "brane-prx",
@@ -55,11 +56,10 @@ members = [
 ]
 
 
-
 [workspace.package]
 version = "3.0.0"
 edition = "2021"
-authors = [ "Onno Valkering", "Tim Müller" ]
+authors = ["Onno Valkering", "Tim Müller"]
 description = "The Brane Framework is a workflow execution system that is capable of dealing with sensitive dataset. Created for the [EPI project](https://enablingpersonalizedinterventions.nl)."
 repository = "https://github.com/braneframework/brane"
 documentation = "https://wiki.enablingpersonalizedinterventions.nl"
@@ -68,14 +68,27 @@ license = "Apache-2.0"
 [workspace.dependencies]
 # Lut99 Crates
 humanlog = { git = "https://github.com/Lut99/humanlog-rs", tag = "v0.2.0" }
-enum-debug = { git = "https://github.com/Lut99/enum-debug", tag = "v1.1.0", features = ["derive"] }
-error-trace = { git = "https://github.com/Lut99/error-trace-rs", tag = "v3.0.0" }
+enum-debug = { git = "https://github.com/Lut99/enum-debug", tag = "v1.1.0", features = [
+    "derive",
+] }
+error-trace = "3.3.1"
 transform = { git = "https://github.com/Lut99/transform-rs", tag = "v0.2.0" }
-names = { git = "https://github.com/Lut99/names-rs", tag = "v0.1.0", default-features = false, features = [ "rand", "three-lowercase" ]}
-download = { git = "https://github.com/Lut99/download-rs", tag = "v0.1.0", default-features = false, features = ["download"] }
+names = { git = "https://github.com/Lut99/names-rs", tag = "v0.1.0", default-features = false, features = [
+    "rand",
+    "three-lowercase",
+] }
+download = { git = "https://github.com/Lut99/download-rs", tag = "v0.1.0", default-features = false, features = [
+    "download",
+] }
 
 # Note: This does not use any root store by default. This will have to be enabled *explicitly* by the workspace member.
-reqwest = { version = "0.12.0", features = ["rustls-tls-manual-roots"], default-features = false }
+reqwest = { version = "0.12.0", features = [
+    "rustls-tls-manual-roots",
+], default-features = false }
+
+# Other BraneFramework / EPI dependencies
+policy-reasoner = { git = "https://github.com/BraneFramework/policy-reasoner.git" }
+policy-store = { git = "https://github.com/BraneFramework/policy-store.git" }
 
 [workspace.lints.clippy]
 result_large_err = { level = "allow", priority = 1 }

Dockerfile.let

@@ -0,0 +1,56 @@
+# DOCKERFILE.let for BRANE
+#   by Tim Müller
+#
+# Contains the Dockerfile for building a `branelet` binary in a container.
+#
+# This is necessary when running a non-released Brane (i.e., no precompiled binaries) and on a
+# system that has a newer GLIBC than would run in the container.
+#
+# The easiest way to use it is through `make brane-let-docker`
+#
+
+
+# NOTE: Ensure this is the same as used by `brane-cli`!
+FROM ubuntu:20.04
+LABEL org.opencontainers.image.source=https://github.com/BraneFramework/brane
+
+# Define some build args
+ARG USERID=1000
+ARG GROUPID=1000
+
+# Setup a user mirroring the main one
+RUN if [ -z "$(getent group "$GROUPID")" ]; then groupadd -g "$GROUPID" brane; fi
+RUN useradd -u "$USERID" -g "$GROUPID" -m brane
+
+# Install build dependencies
+RUN apt-get update && DEBIAN_FRONTEND=noninteractive TZ=Etc/UTC apt-get install -y \
+    gcc g++ \
+    make cmake \
+    perl curl \
+ && rm -rf /var/lib/apt/lists/*
+
+# Install rust
+USER brane
+RUN bash -c "curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y" \
+ && echo ". /home/brane/.cargo/env" >> /home/brane/.profile
+
+# Copy over relevant crates & other files
+USER root
+COPY . /build
+RUN mkdir -p /build/target \
+ && chown -R brane:$(getent group "$GROUPID" | cut -d: -f1) /build
+
+# Build the binary
+WORKDIR /build
+USER brane
+RUN --mount=type=cache,id=cargoidx,uid=$USERID,target=/home/brane/.cargo/registry \
+    --mount=type=cache,id=braneletcache,uid=$USERID,target=/build/target \
+    . /home/brane/.profile \
+ && cargo build \
+    --release \
+    --package brane-let \
+ && cp ./target/release/branelet /home/brane/branelet
+
+# Done
+ENTRYPOINT ["cp", "/home/brane/branelet", "/output/branelet"]
+