This fixes the pipeline failure from #144 as well as subsequent issues
and the underlying security issue.

Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

It seems like the 2.4.0 version of codespell does deem the current
wording incorrect, therefore change it to the suggested "reuse"
spelling.

Fixes #143



Signed-off-by: Christian Heusel <christian@heusel.eu>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Add `NonAdministrativeSecretHandling` to `ParallelHermeticConfig` and
adjust all documentation to reflect this.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

- Add `AdministrativeSecretHandling` to `ParallelHermeticConfig` and
  adjust all documentation to reflect this.
- Adjust `ParallelHermeticConfig::validate` to check for users for share
  upload and download only when using Shamir's Secret Sharing and fail
  if they are set otherwise.
- Move all use of configuration file strings in unit tests to separate
  fixture files, which allows better readability (also due to syntax
  highlighting).

Fixes: #123


Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Fix the wrong use of the `PACMAN_DEV_PACKAGES` environment
variable in the `install-pacman-dev-packages` recipe (it is called
`PACMAN_PACKAGES`).
Execute `pacman` using `run0` to ensure it can be run without `sudo` on
any newer systemd-based system.
Don't update the system but simply install the packages.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

Signed-off-by: renovate <renovate@archlinux.org>

Fixes: #109


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

This strategy is more robust when starting multiple containers.

Updating `rustainers` to 0.14 is needed for `require_valid_certs` configuration toggle.
Since NetHSM uses self-signed certificate on port 8443 the check would always fail otherwise.

See: https://github.com/wefoxplatform/rustainers/issues/40


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: David Runge <dvzrv@archlinux.org>

As normal tests run containerized we can parallelize them with the
integration tests (requiring a VM).

Signed-off-by: David Runge <dvzrv@archlinux.org>

Fixes: #126


Signed-off-by: David Runge <dvzrv@archlinux.org>

Run integration tests for library and executables in parallel (the
signstaros related tests are still run separately).

Signed-off-by: David Runge <dvzrv@archlinux.org>

Fixes: #119


Signed-off-by: David Runge <dvzrv@archlinux.org>

Add signstar configuration that specifies only the default administrator
user, and those for up and downloading shared secrets and a dummy
connection to a local NetHSM user.

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Fixes: #49
Fixes: #41


Signed-off-by: Wiktor Kwapisiewicz <wiktor@metacode.biz>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Signed-off-by: David Runge <dvzrv@archlinux.org>

Dry-run `cargo publish` to ensure the targeted crate would be
publishable, before creating branches or commits.

Signed-off-by: David Runge <dvzrv@archlinux.org>