News for hackers. Stuff that matters.

A comment on Rust Malware Staged on Crates.io. Parent comment

Re:Rust Malware Staged on Crates.io by goku12 on Friday August 25, 2023 @12:07PM (#37263315)
> I would love it if cargo had a mechanism to run all build actions for a crate inside a firecracker vm

Why not go in the other direction? A tool that can set up a VM with source code and build tools based on a declarative file? That could work for any language - not just Rust. Sort of like a completely local CI system.

[ Parent | on HN ]
Re:Rust Malware Staged on Crates.io by oneshtein on Friday August 25, 2023 @01:15PM (#37264348)
Who will verify VM, your local CI, and produced binary?
[ Parent | on HN ]
Re:Rust Malware Staged on Crates.io by goku12 on Friday August 25, 2023 @01:55PM (#37264866)
The idea of the microVM is to isolate the build system from the host. Your question is beyond the scope of the original problem.
[ Parent | on HN ]
Re:Rust Malware Staged on Crates.io by remram on Friday August 25, 2023 @04:20PM (#37266534)
You're describing Vagrant.
[ Parent | on HN ]
Re:Rust Malware Staged on Crates.io by goku12 on Friday August 25, 2023 @11:22PM (#37269679)
Ah! You're right. I wonder if vagrant is enough to mitigate these concerns.
[ Parent | on HN ]