Merge remote-tracking branch 'origin/main' into iliana/rust-1.78

.github/buildomat/build-and-test.sh

@@ -76,19 +76,6 @@ export RUSTC_BOOTSTRAP=1
 # We report build progress to stderr, and the "--timings=json" output goes to stdout.
 ptime -m cargo build -Z unstable-options --timings=json --workspace --tests --locked --verbose 1> "$OUTPUT_DIR/crate-build-timings.json"
 
-# If we are running on illumos we want to verify that we are not requiring
-# system libraries outside of specific binaries. If we encounter this situation
-# we bail.
-# NB: `cargo xtask verify-libraries` runs `cargo build --bins` to ensure it can
-# check the final executables.
-if [[ $target_os == "illumos" ]]; then
-    banner verify-libraries
-    # This has a separate timeout from `cargo nextest` since `timeout` expects
-    # to run an external command and therefore we cannot run bash functions or
-    # subshells.
-    ptime -m timeout 10m cargo xtask verify-libraries
-fi
-
 #
 # We apply our own timeout to ensure that we get a normal failure on timeout
 # rather than a buildomat timeout.  See oxidecomputer/buildomat#8.

.github/buildomat/jobs/a4x2-deploy.sh

@@ -2,7 +2,7 @@
 #:
 #: name = "a4x2-deploy"
 #: variety = "basic"
-#: target = "lab-2.0-opte-0.27"
+#: target = "lab-2.0-opte-0.29"
 #: output_rules = [
 #:	"/out/falcon/*.log",
 #:	"/out/falcon/*.err",

.github/buildomat/jobs/omicron-common.sh

@@ -0,0 +1,25 @@
+#!/bin/bash
+#:
+#: name = "omicron-common (helios)"
+#: variety = "basic"
+#: target = "helios-2.0"
+#: rust_toolchain = "1.78.0"
+#: output_rules = []
+
+# Verify that omicron-common builds successfully when used as a dependency
+# in an external project. It must not leak anything that requires an external
+# dependency (apart from OpenSSL/pkg-config).
+
+set -o errexit
+set -o pipefail
+set -o xtrace
+
+cargo --version
+rustc --version
+
+cd /tmp
+cargo new --lib test-project
+cd test-project
+cargo add omicron-common --path /work/oxidecomputer/omicron/common
+cargo check
+cargo build --release

.github/buildomat/jobs/tuf-repo.sh

@@ -3,7 +3,7 @@
 #: name = "helios / build TUF repo"
 #: variety = "basic"
 #: target = "helios-2.0"
-#: rust_toolchain = "1.77.2"
+#: rust_toolchain = "1.78.0"
 #: output_rules = [
 #:	"=/work/manifest.toml",
 #:	"=/work/repo.zip",
@@ -65,4 +65,4 @@ esac
 pfexec zfs create -p "rpool/images/$USER/host"
 pfexec zfs create -p "rpool/images/$USER/recovery"
 
-cargo run --release --bin omicron-releng -- --output-dir /work
+cargo xtask releng --output-dir /work

.github/workflows/hakari.yml

@@ -17,14 +17,14 @@ jobs:
     env:
       RUSTFLAGS: -D warnings
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           ref: ${{ github.event.pull_request.head.sha }} # see omicron#4461
       - uses: actions-rs/toolchain@16499b5e05bf2e26879000db0c1d13f7e13fa3af # v1
         with:
           toolchain: stable
       - name: Install cargo-hakari
-        uses: taiki-e/install-action@2f990e9c484f0590cb76a07296e9677b417493e9 # v2
+        uses: taiki-e/install-action@0fc560009ad92371154ca652dcf2620d19331eee # v2
         with:
           tool: cargo-hakari
       - name: Check workspace-hack Cargo.toml is up-to-date