remove zmq revocation actions feature

Revocation through zmq is scheduled to be removed for the next major
release and is already marked as deprecated.

Signed-off-by: Vikram Narayanan <[email protected]>

Author: arkivm

Cargo.lock

@@ -36,11 +36,10 @@ The following packages are required for building:
 * `libarchive-devel`
 * `openssl-devel`
 * `tpm2-tss-devel`
-* (optional for the `with-zmq` feature): `zeromq-devel`
 
 To install, use the following command:
 ```
-$ dnf install clang libarchive-devel openssl-devel tpm2-tss-devel zeromq-devel
+$ dnf install clang libarchive-devel openssl-devel tpm2-tss-devel
 ```
 
 For runtime, the following packages are required:
@@ -50,7 +49,6 @@ For runtime, the following packages are required:
 * `tpm2-tss`
 * `systemd` (to run as systemd service)
 * `util-linux-core` (for the `mount` command)
-* (optional for the `with-zmq` feature): `zeromq`
 
 #### Debian and Ubuntu
 
@@ -61,12 +59,11 @@ For Debian and Ubuntu, use the following packages are required:
 * `libssl-dev`
 * `libtss2-dev`
 * `pkg-config`
-* (optional for the `with-zmq` feature): `libzmq3-dev`
 
 To install, use the following command:
 
 ```
-$ apt-get install libarchive-dev libclang-dev libssl-dev libtss2-dev libzmq3-dev pkg-config
+$ apt-get install libarchive-dev libclang-dev libssl-dev libtss2-dev pkg-config
 ```
 
 For runtime, the following packages are required:
@@ -75,7 +72,6 @@ For runtime, the following packages are required:
 * `libarchive`
 * `libssl`
 * `libtss2-esys-3.0.2-0`
-* (optional for the `with-zmq` feature): `libzmq3`
 * `systemd` (to run as systemd service)
 
 ### Rust

README.md

@@ -50,8 +50,7 @@ tpm2-abrmd \
 tpm2-tools \
 tpm2-tss \
 tpm2-tss-devel \
-uthash-devel \
-czmq-devel"
+uthash-devel"
 
 RUN dnf makecache && \
   dnf -y install $PKGS_DEPS && \

docker/fedora/keylime_rust.Dockerfile

@@ -127,14 +127,6 @@ secure_size = "1m"
 # environment variable.
 extract_payload_zip = true
 
-# Whether to listen for revocation notifications from the verifier via zeromq.
-# Note: The agent supports receiving revocation notifications via REST API
-# regardless of the value set here.
-#
-# To override enable_revocation_notifications, set
-# KEYLIME_AGENT_ENABLE_REVOCATION_NOTIFICATIONS environment variable.
-enable_revocation_notifications = false
-
 # The path to the directory containing the pre-installed revocation action
 # scripts.  Ideally should point to an fixed/immutable location subject to
 # attestation.  The default is /usr/libexec/keylime.
@@ -143,17 +135,6 @@ enable_revocation_notifications = false
 # environment variable.
 revocation_actions_dir = "/usr/libexec/keylime"
 
-# Revocation IP & Port used by the agent to receive revocation
-# notifications from the verifier via zeromq.
-# This is optional and used only when 'enable_revocation_notifications' is 'true'.
-#
-# To override revocation_notification_ip, set
-# KEYLIME_AGENT_REVOCATION_NOTIFICATION_IP environment variable.
-# To override revocation_notification_port, set
-# KEYLIME_AGENT_REVOCATION_NOTIFICATION_PORT environment variable.
-revocation_notification_ip = "127.0.0.1"
-revocation_notification_port = 8992
-
 # The path to the certificate to verify revocation messages received from the
 # verifier.  The path is relative to keylime_dir unless an absolute path is
 # provided (i.e. starts with '/').

keylime-agent.conf

@@ -34,7 +34,6 @@ tokio = {version = "1.24", features = ["rt", "sync", "macros"]}
 tss-esapi = {version = "7.2.0", features = ["generate-bindings"]}
 thiserror = "1.0"
 uuid = {version = "1.3", features = ["v4"]}
-zmq = {version = "0.9.2", optional = true}
 # wiremock was moved to be a regular dependency because optional
 # dev-dependencies are not supported
 # see: https://github.com/rust-lang/cargo/issues/1596
@@ -48,11 +47,6 @@ actix-rt = "2"
 default = []
 # this should change to dev-dependencies when we have integration testing
 testing = ["wiremock"]
-# Whether the agent should be compiled with support to listen for notification
-# messages on ZeroMQ
-#
-# This feature is deprecated and will be removed on next major release
-with-zmq = ["zmq"]
 # Whether the agent should be compiled with support for python revocation
 # actions loaded as modules, which is the only kind supported by the python
 # agent (unless the enhancement-55 is implemented). See: