rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5 heartwood7f6c3ded03ec45e65063be00a0397d98abbd3e4e
{
"request": "trigger",
"version": 1,
"event_type": "patch",
"repository": {
"id": "rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5",
"name": "heartwood",
"description": "Radicle Heartwood Protocol & Stack",
"private": false,
"default_branch": "master",
"delegates": [
"did:key:z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT",
"did:key:z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW",
"did:key:z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM",
"did:key:z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz",
"did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz"
]
},
"action": "Updated",
"patch": {
"id": "ed450c98018617be362fcb51c50a2a0f4c66ef69",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"title": "node: Make location of secret key configurable",
"state": {
"status": "open",
"conflicts": []
},
"before": "9e1d6b1feb2635cc03e07443f564f0880b540927",
"after": "7f6c3ded03ec45e65063be00a0397d98abbd3e4e",
"commits": [
"7f6c3ded03ec45e65063be00a0397d98abbd3e4e",
"5887edf93b495d6f05525973f18885c653181d1b"
],
"target": "9e1d6b1feb2635cc03e07443f564f0880b540927",
"labels": [],
"assignees": [],
"revisions": [
{
"id": "ed450c98018617be362fcb51c50a2a0f4c66ef69",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "With this change, the location of the secret SSH key can be configured\nthrough `${RAD_HOME}/config.json` so that the node key does not have to\nbe placed under `${RAD_HOME}/keys` anymore.\n\nFurther, there is now an option to override `config.json` directly when\nexecuting `radicle-node` via the command line argument\n`--secret`.\n\nThe primary motivation is more flexible deployments, for example\nleveraging external secret management solutions, like\n<https://systemd.io/CREDENTIALS/>.\n\nIn order to get this implemented, I had to make modifications\nto the keystore in `radicle-ssh`.",
"base": "6ab3bfcba0577fabdcb84498441c6605391290f4",
"oid": "2b5a0199a4c2f856dda67e6b377209d41da08023",
"timestamp": 1715128217
},
{
"id": "ee94b9696218880e63eae64c5dff06f875633630",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Updates after initial review by Fintan:\n - Don't implement `Default` for `Keys`.\n - Bring back `keys()`.\n - Add `Home::default_keys()`.\n - Introduce constant string for `\".radicle\"`.\n - Fix `radicle-httpd` tests.",
"base": "25c6660a59c621de1ec406e4f9b2ccfbd21e1b90",
"oid": "f8864608b9bc255bf1c5f04598445b361bf9dfdf",
"timestamp": 1715641705
},
{
"id": "de5f30a3448521fc761bee2a5ddc2ba72bf6e00e",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Minor changes to previous revision.",
"base": "25c6660a59c621de1ec406e4f9b2ccfbd21e1b90",
"oid": "bf969780502e2883b56dfca3929ba94000492d91",
"timestamp": 1715643263
},
{
"id": "7ed460f7dd1a8130076aca13f1c3965cbf299ee6",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "More rusty fingerprint check.",
"base": "25c6660a59c621de1ec406e4f9b2ccfbd21e1b90",
"oid": "b594a38ebc72ff6253a24d196c6f718771c578da",
"timestamp": 1715711933
},
{
"id": "c0d0e7b633692b66c6aba6866ff7bfb78f66b4a1",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Another round of review by Fintan.",
"base": "25c6660a59c621de1ec406e4f9b2ccfbd21e1b90",
"oid": "cadb70c3d91ef3faece5bfc2628aed59596023dd",
"timestamp": 1715773899
},
{
"id": "624a626ca52ccf4d3cc5b38d040b3439c8465241",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Forgot to work in some review comments\u2026",
"base": "25c6660a59c621de1ec406e4f9b2ccfbd21e1b90",
"oid": "bcb7bf320630a503f3e8961908554978f798d390",
"timestamp": 1715775736
},
{
"id": "7439eebf7e76fb180feded75b92205d5b58b60d4",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Trivial rebase.",
"base": "5727359319f2b8ba6311f066391b7ab0004e5558",
"oid": "7a637fd85244922ea110da0b38dee69f15a49f94",
"timestamp": 1715775992
},
{
"id": "986c4c2593461142dcf3296c28f266ce912f3730",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Rebase",
"base": "ca7db1620c6f8d4e9caed0902b191c5e6def8bc3",
"oid": "ad252b693e81f06781acb016b11411d7662b9844",
"timestamp": 1715865841
},
{
"id": "821cdf971face4efa942018eb327ebd17fac0b3e",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Another round of review. Rebase.",
"base": "064ece32ac0a0bd0efe4f459dcb0462bafc236e6",
"oid": "1431768b064d0681ca003658882a9018a3dfcda5",
"timestamp": 1716196287
},
{
"id": "f160f2c3a7bd4e8f661c3685079705ad372c1665",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Fixes after review. Tests are broken.",
"base": "6dcd56275e606396ec82f4e95fab1d736e8152a4",
"oid": "25a9072138098ba056a18ad4d3787a45183d80b0",
"timestamp": 1745510251
},
{
"id": "312144c8fb8baf2e3610e18a5e4894bdb0578b66",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Pulled out the changes to CLI testing. They are now in `rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5/patch/12bc8517149547b24ccdc10def80ee34ec9368cc`.",
"base": "f13afe491d169004159a033c4ad7548a7ba76271",
"oid": "d2f7b8988f3cb65212fc0c2236aac523f8f46622",
"timestamp": 1745589182
},
{
"id": "f4e2ffc215916ee397d7fc5f67a60590a8bbf794",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Rewrite the whole thing. It's *much* cleaner now.",
"base": "bc4a13902ca80b1c496ab65670c0526141663e9e",
"oid": "dec836e7ad4697f0c8eea848a18b2da75913ba03",
"timestamp": 1756255247
},
{
"id": "dedcf2e12117c5ba15487fc718abdec0e5201077",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "REVIEW: see commits",
"base": "bc4a13902ca80b1c496ab65670c0526141663e9e",
"oid": "9b1627faee800898a4a28c22dc276902809de745",
"timestamp": 1757416285
},
{
"id": "4991e458f020e5f2870b15b38464cd13e279953e",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "- Apply most of Fintan's suggested changes.\n- Improve documentation, hopefully answering Fintan's questions.",
"base": "bc4a13902ca80b1c496ab65670c0526141663e9e",
"oid": "46a0998ab96d4b2e960dd0d81cabe8a0b0bdcfcf",
"timestamp": 1757536685
},
{
"id": "21c7dbc3bf02fd8a2284e122ab2e30ec8de053ef",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Rebase",
"base": "ed8b086045ee5d7bd1327f579de7861a1cf49e3b",
"oid": "5ce5010cb45523867b3cc420b9167bb7e2d3383b",
"timestamp": 1758733474
},
{
"id": "152c9e8e82ec30250b00b37f015778ebf90ee2c6",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Rewrite",
"base": "ed8b086045ee5d7bd1327f579de7861a1cf49e3b",
"oid": "cca3454defb46f697ab409093e4273074fcd6364",
"timestamp": 1758816361
},
{
"id": "b9a61dbc0c6aab73de220df5cbadf1eb40c3304f",
"author": {
"id": "did:key:z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz",
"alias": "lorenz"
},
"description": "Add tests, polish.",
"base": "9e1d6b1feb2635cc03e07443f564f0880b540927",
"oid": "7f6c3ded03ec45e65063be00a0397d98abbd3e4e",
"timestamp": 1758886673
}
]
}
}
{
"response": "triggered",
"run_id": {
"id": "88826098-6158-4b40-8959-7e2c10c4b538"
},
"info_url": "https://cci.rad.levitte.org//88826098-6158-4b40-8959-7e2c10c4b538.html"
}
Started at: 2025-09-26 13:37:59.600167+02:00
Commands:
$ rad clone rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5 .
✓ Creating checkout in ./...
✓ Remote cloudhead@z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT added
✓ Remote-tracking branch cloudhead@z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT/master created for z6MksFqXN3Yhqk8pTJdUGLwATkRfQvwZXPqR2qMEhbS9wzpT
✓ Remote cloudhead@z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW added
✓ Remote-tracking branch cloudhead@z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW/master created for z6MktaNvN1KVFMkSRAiN4qK5yvX1zuEEaseeX5sffhzPZRZW
✓ Remote fintohaps@z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM added
✓ Remote-tracking branch fintohaps@z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM/master created for z6MkireRatUThvd3qzfKht1S44wpm4FEWSSa4PRMTSQZ3voM
✓ Remote erikli@z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz added
✓ Remote-tracking branch erikli@z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz/master created for z6MkgFq6z5fkF2hioLLSNu1zP2qEL1aHXHZzGH1FLFGAnBGz
✓ Remote lorenz@z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz added
✓ Remote-tracking branch lorenz@z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz/master created for z6MkkPvBfjP4bQmco5Dm7UGsX2ruDBieEHi8n9DVJWX5sTEz
✓ Repository successfully cloned under /opt/radcis/ci.rad.levitte.org/cci/state/88826098-6158-4b40-8959-7e2c10c4b538/w/
╭────────────────────────────────────╮
│ heartwood │
│ Radicle Heartwood Protocol & Stack │
│ 123 issues · 16 patches │
╰────────────────────────────────────╯
Run `cd ./.` to go to the repository directory.
Exit code: 0
$ rad patch checkout ed450c98018617be362fcb51c50a2a0f4c66ef69
✓ Switched to branch patch/ed450c9 at revision b9a61db
✓ Branch patch/ed450c9 setup to track rad/patches/ed450c98018617be362fcb51c50a2a0f4c66ef69
Exit code: 0
$ git config advice.detachedHead false
Exit code: 0
$ git checkout 7f6c3ded03ec45e65063be00a0397d98abbd3e4e
HEAD is now at 7f6c3ded node: Make location of secret key configurable
Exit code: 0
$ git show 7f6c3ded03ec45e65063be00a0397d98abbd3e4e
commit 7f6c3ded03ec45e65063be00a0397d98abbd3e4e
Author: Lorenz Leutgeb <lorenz.leutgeb@radicle.xyz>
Date: Wed Aug 27 02:32:03 2025 +0200
node: Make location of secret key configurable
With this change, the location of the secret SSH key can be configured
through `${RAD_HOME}/config.json` so that the node key does not have to
be placed under `${RAD_HOME}/keys` anymore.
Further, there is now an option to override `config.json` directly when
executing `radicle-node` via the command line argument
`--secret`.
The primary motivation is more flexible deployments, for example
leveraging external secret management solutions, like
<https://systemd.io/CREDENTIALS/>.
The secret key is fingerprinted by taking the fingerprint of the public
key corresponding to the secret key. This allows to detect when the
secret key changes.
diff --git a/crates/radicle-node/src/fingerprint.rs b/crates/radicle-node/src/fingerprint.rs
new file mode 100644
index 00000000..3c486f43
--- /dev/null
+++ b/crates/radicle-node/src/fingerprint.rs
@@ -0,0 +1,134 @@
+//! Fingerprint the public key corresponding to the secret key used by
+//! `radicle-node`.
+//!
+//! This allows users to configure the path to the secret key
+//! freely, while ensuring that the key is not changed.
+//!
+//! In order to achieve this, the fingerprint of the public key
+//! derived from the secret key is stored in the Radicle home
+//! in a file (usually at `.radicle/node/fingerprint`).
+//! When the node starts up and this file does not exist, it is assumed that
+//! this is the first time the node is started, and the fingerprint is
+//! initialized from the secret key in the keystore.
+//! On subsequent startups, the fingerprint of the public key
+//! derived from the secret key in the keystore is compared to the
+//! fingerprint stored on disk, and if they do not match, the node
+//! refuses to start (this last part is implemented in `main.rs`).
+//!
+//! If the user deletes the fingerprint file, the node will not be able
+//! to detect a possible change of the secret key. The consequences of
+//! doing this are unclear.
+
+use thiserror::Error;
+
+use radicle::crypto;
+use radicle::profile::Home;
+
+/// Fingerprint of a public key.
+#[derive(Debug, PartialEq)]
+pub struct Fingerprint(String);
+
+impl std::fmt::Display for Fingerprint {
+ fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+ write!(f, "{}", self.0)
+ }
+}
+
+#[derive(Debug, PartialEq, Eq)]
+pub enum FingerprintVerification {
+ Match,
+ Mismatch,
+}
+
+#[derive(Error, Debug)]
+pub enum Error {
+ #[error(transparent)]
+ Io(#[from] std::io::Error),
+
+ #[error("fingerprint file is not valid UTF-8: {0}")]
+ Utf8(#[from] std::str::Utf8Error),
+}
+
+impl Fingerprint {
+ /// Return fingerprint of the node, if it exists.
+ pub fn read(home: &Home) -> Result<Option<Fingerprint>, Error> {
+ match std::fs::read(path(home)) {
+ Ok(contents) => Ok(Some(Fingerprint(
+ String::from(std::str::from_utf8(contents.as_ref())?)
+ .trim_end()
+ .to_string(),
+ ))),
+ Err(err) if err.kind() == std::io::ErrorKind::NotFound => Ok(None),
+ Err(err) => Err(Error::Io(err)),
+ }
+ }
+
+ /// Initialize the fingerprint of the node with given public key.
+ pub fn init(
+ home: &Home,
+ secret_key: &impl std::ops::Deref<Target = crypto::SecretKey>,
+ ) -> Result<(), Error> {
+ let public_key = crypto::PublicKey(secret_key.deref().public_key());
+ let mut file = std::fs::OpenOptions::new()
+ .create_new(true)
+ .write(true)
+ .open(path(home))?;
+ {
+ use std::io::Write as _;
+ file.write_all(crypto::ssh::fmt::fingerprint(&public_key).as_ref())?;
+ }
+
+ Ok(())
+ }
+
+ /// Verify that the fingerprint of given public key matches self.
+ pub fn verify(
+ &self,
+ secret_key: &impl std::ops::Deref<Target = crypto::SecretKey>,
+ ) -> FingerprintVerification {
+ let public_key = crypto::PublicKey(secret_key.deref().public_key());
+ if crypto::ssh::fmt::fingerprint(&public_key) == self.0 {
+ FingerprintVerification::Match
+ } else {
+ FingerprintVerification::Mismatch
+ }
+ }
+}
+
+/// Return the location of the node fingerprint.
+fn path(home: &Home) -> std::path::PathBuf {
+ home.node().join("fingerprint")
+}
+
+#[cfg(test)]
+mod tests {
+ use super::*;
+
+ use crypto::ssh::Keystore;
+
+ #[test]
+ fn matching() {
+ let tmp = tempfile::tempdir().unwrap();
+ let home = Home::new(&tmp.path()).unwrap();
+
+ let store = Keystore::new(&home.keys());
+ store.init("test 1", None, crypto::Seed::default()).unwrap();
+ let secret = store.secret_key(None).unwrap().unwrap();
+
+ assert_eq!(Fingerprint::read(&home).unwrap(), None);
+ Fingerprint::init(&home, &secret).unwrap();
+
+ let fp = Fingerprint::read(&home).unwrap().unwrap();
+ assert_eq!(fp.verify(&secret), FingerprintVerification::Match);
+
+ // Generate a new keypair, which does not match the fingerprint.
+ // This simulates the user modifying `~/.radicle/keys`.
+ std::fs::remove_dir_all(home.keys()).unwrap();
+ store.init("test 1", None, crypto::Seed::default()).unwrap();
+ let other_secret = store.secret_key(None).unwrap().unwrap();
+
+ assert_ne!(secret, other_secret);
+ // Note that `fp` has not changed since it was initialiazed from `secret`.
+ assert_eq!(fp.verify(&other_secret), FingerprintVerification::Mismatch);
+ }
+}
diff --git a/crates/radicle-node/src/lib.rs b/crates/radicle-node/src/lib.rs
index 4e9fbfbe..5ba2c1e0 100644
--- a/crates/radicle-node/src/lib.rs
+++ b/crates/radicle-node/src/lib.rs
@@ -7,6 +7,7 @@ use std::str::FromStr;
use std::sync::LazyLock;
pub mod control;
+pub mod fingerprint;
pub mod runtime;
pub(crate) use radicle_protocol::service;
#[cfg(any(test, feature = "test"))]
diff --git a/crates/radicle-node/src/main.rs b/crates/radicle-node/src/main.rs
index 4fbcf360..799bd99b 100644
--- a/crates/radicle-node/src/main.rs
+++ b/crates/radicle-node/src/main.rs
@@ -11,6 +11,7 @@ use radicle::node::device::Device;
use radicle::profile;
use radicle_node::crypto::ssh::keystore::{Keystore, MemorySigner};
+use radicle_node::fingerprint::{Fingerprint, FingerprintVerification};
use radicle_node::{Runtime, VERSION};
#[cfg(unix)]
use radicle_signals as signals;
@@ -27,6 +28,8 @@ Options
--config <path> Config file to use
(default: ~/.radicle/config.json)
+ --secret <path> Secret key to use
+ (default ~/.radicle/keys/radicle)
--force Force start even if an existing control socket
is found
--listen <address> Address to listen on
@@ -100,6 +103,7 @@ struct LogOptions {
struct Options {
config: Option<PathBuf>,
+ secret: Option<PathBuf>,
listen: Vec<SocketAddr>,
log: LogOptions,
force: bool,
@@ -112,6 +116,7 @@ fn parse_options() -> Result<Options, lexopt::Error> {
let mut parser = lexopt::Parser::from_env();
let mut listen = Vec::new();
let mut config = None;
+ let mut secret = None;
let mut force = false;
let mut log_level = None;
let mut log_logger = Logger::default();
@@ -125,6 +130,9 @@ fn parse_options() -> Result<Options, lexopt::Error> {
Long("config") => {
config = Some(parser.value()?.parse_with(PathBuf::from_str)?);
}
+ Long("secret") => {
+ secret = Some(parser.value()?.parse()?);
+ }
Long("listen") => {
let addr = parser.value()?.parse_with(SocketAddr::from_str)?;
listen.push(addr);
@@ -164,6 +172,7 @@ fn parse_options() -> Result<Options, lexopt::Error> {
Ok(Options {
force,
+ secret,
listen,
config,
log: LogOptions {
@@ -181,9 +190,21 @@ enum ExecutionError {
#[error(transparent)]
ConfigurationLoading(#[from] profile::config::LoadError),
#[error(transparent)]
- MemorySigner(#[from] radicle::crypto::ssh::keystore::MemorySignerError),
- #[error(transparent)]
Runtime(#[from] radicle_node::runtime::Error),
+ #[error(transparent)]
+ Fingerprint(#[from] radicle_node::fingerprint::Error),
+ #[error("failed to load secret key '{path}': not found")]
+ SecretNotFound { path: PathBuf },
+ #[error("failed to load secret '{path}': {source}")]
+ SecretLoading {
+ path: PathBuf,
+ source: radicle::crypto::ssh::keystore::Error,
+ },
+ #[error("failed to load secret key '{secret}': fingerprint of corresponding public key is different from '{fingerprint}'")]
+ FingerprintMismatch {
+ secret: PathBuf,
+ fingerprint: Fingerprint,
+ },
}
fn execute(options: Options) -> Result<(), ExecutionError> {
@@ -215,9 +236,38 @@ fn execute(options: Options) -> Result<(), ExecutionError> {
log::info!(target: "node", "Unlocking node keystore..");
let passphrase = profile::env::passphrase();
- let keystore = Keystore::new(&home.keys());
- let signer = Device::from(MemorySigner::load(&keystore, passphrase)?);
+ let secret_path = options
+ .secret
+ .or_else(|| config.node.secret.clone())
+ .unwrap_or_else(|| home.keys().join("radicle"));
+
+ let keystore = Keystore::from_secret_path(&secret_path);
+
+ let secret_key = keystore
+ .secret_key(passphrase.clone())
+ .map_err(|err| ExecutionError::SecretLoading {
+ path: secret_path.clone(),
+ source: err,
+ })?
+ .ok_or_else(|| ExecutionError::SecretNotFound {
+ path: secret_path.clone(),
+ })?;
+
+ if let Some(fp) = Fingerprint::read(&home)? {
+ log::debug!(target: "node", "Verifying fingerprint..");
+ if fp.verify(&secret_key) != FingerprintVerification::Match {
+ return Err(ExecutionError::FingerprintMismatch {
+ secret: keystore.secret_key_path().to_path_buf(),
+ fingerprint: fp,
+ });
+ }
+ } else {
+ log::info!(target: "node", "Initializing fingerprint..");
+ Fingerprint::init(&home, &secret_key)?;
+ }
+
+ let signer = Device::from(MemorySigner::from_secret(secret_key));
log::info!(target: "node", "Node ID is {}", signer.public_key());
// Add the preferred seeds as persistent peers so that we reconnect to them automatically.
diff --git a/crates/radicle/src/node/config.rs b/crates/radicle/src/node/config.rs
index 4e6aa637..faaf9f70 100644
--- a/crates/radicle/src/node/config.rs
+++ b/crates/radicle/src/node/config.rs
@@ -459,6 +459,14 @@ pub struct Config {
/// Extra fields that aren't supported.
#[serde(flatten, skip_serializing)]
pub extra: json::Map<String, json::Value>,
+ /// Path to a file containing an Ed25519 secret key, in OpenSSH format, i.e.
+ /// with the `-----BEGIN OPENSSH PRIVATE KEY-----` header. The corresponding
+ /// public key will be used as the Node ID.
+ ///
+ /// A decryption password cannot be configured, but passed at runtime via
+ /// the environment variable `RAD_PASSPHRASE`.
+ #[serde(default, skip_serializing_if = "Option::is_none")]
+ pub secret: Option<std::path::PathBuf>,
}
impl Config {
@@ -485,6 +493,7 @@ impl Config {
log: LogLevel::default(),
seeding_policy: DefaultSeedingPolicy::default(),
extra: json::Map::default(),
+ secret: None,
}
}
Exit code: 0
shell: 'export RUSTDOCFLAGS=''-D warnings'' cargo --version rustc --version cargo fmt --check cargo clippy --all-targets --workspace -- --deny warnings cargo build --all-targets --workspace cargo doc --workspace --no-deps cargo test --workspace --no-fail-fast '
Commands:
$ podman run --name 88826098-6158-4b40-8959-7e2c10c4b538 -v /opt/radcis/ci.rad.levitte.org/cci/state/88826098-6158-4b40-8959-7e2c10c4b538/s:/88826098-6158-4b40-8959-7e2c10c4b538/s:ro -v /opt/radcis/ci.rad.levitte.org/cci/state/88826098-6158-4b40-8959-7e2c10c4b538/w:/88826098-6158-4b40-8959-7e2c10c4b538/w -w /88826098-6158-4b40-8959-7e2c10c4b538/w -v /opt/radcis/ci.rad.levitte.org/.radicle:/${id}/.radicle:ro -e RAD_HOME=/${id}/.radicle rust:bookworm bash /88826098-6158-4b40-8959-7e2c10c4b538/s/script.sh
+ export 'RUSTDOCFLAGS=-D warnings'
+ RUSTDOCFLAGS='-D warnings'
+ cargo --version
info: syncing channel updates for '1.88-x86_64-unknown-linux-gnu'
info: latest update on 2025-06-26, rust version 1.88.0 (6b00bc388 2025-06-23)
info: downloading component 'cargo'
info: downloading component 'clippy'
info: downloading component 'rust-docs'
info: downloading component 'rust-src'
info: downloading component 'rust-std'
info: downloading component 'rustc'
info: downloading component 'rustfmt'
info: installing component 'cargo'
info: installing component 'clippy'
info: installing component 'rust-docs'
info: installing component 'rust-src'
info: installing component 'rust-std'
info: installing component 'rustc'
info: installing component 'rustfmt'
cargo 1.88.0 (873a06493 2025-05-10)
+ rustc --version
rustc 1.88.0 (6b00bc388 2025-06-23)
+ cargo fmt --check
+ cargo clippy --all-targets --workspace -- --deny warnings
Updating crates.io index
Downloading crates ...
Downloaded amplify v4.6.0
Downloaded ff v0.13.0
Downloaded adler2 v2.0.0
Downloaded addr2line v0.24.2
Downloaded shell-words v1.1.0
Downloaded form_urlencoded v1.2.1
Downloaded radicle-surf v0.22.0
Downloaded gix-protocol v0.47.0
Downloaded blowfish v0.9.1
Downloaded pin-project-lite v0.2.16
Downloaded icu_locid_transform v1.5.0
Downloaded num-complex v0.4.6
Downloaded phf_shared v0.11.3
Downloaded ppv-lite86 v0.2.17
Downloaded anyhow v1.0.82
Downloaded percent-encoding v2.3.1
Downloaded pbkdf2 v0.12.2
Downloaded colorchoice v1.0.0
Downloaded colored v2.1.0
Downloaded num-integer v0.1.46
Downloaded polyval v0.6.2
Downloaded portable-atomic v1.11.0
Downloaded poly1305 v0.8.0
Downloaded num-rational v0.4.2
Downloaded num-bigint-dig v0.8.4
Downloaded popol v3.0.0
Downloaded ct-codecs v1.1.1
Downloaded bloomy v1.2.0
Downloaded tokio v1.47.1
Downloaded socket2 v0.5.7
Downloaded snapbox v0.4.17
Downloaded serde_derive_internals v0.29.1
Downloaded convert_case v0.7.1
Downloaded ghash v0.5.1
Downloaded faster-hex v0.9.0
Downloaded same-file v1.0.6
Downloaded derive_more-impl v2.0.1
Downloaded icu_provider_macros v1.5.0
Downloaded rsa v0.9.6
Downloaded human-panic v2.0.3
Downloaded write16 v1.0.0
Downloaded gix-transport v0.44.0
Downloaded normalize-line-endings v0.3.0
Downloaded matchers v0.1.0
Downloaded socks5-client v0.4.1
Downloaded subtle v2.5.0
Downloaded spin v0.9.8
Downloaded gix-path v0.10.15
Downloaded synstructure v0.13.1
Downloaded icu_provider v1.5.0
Downloaded crossterm v0.25.0
Downloaded systemd-journal-logger v2.2.2
Downloaded sval_ref v2.14.1
Downloaded nonempty v0.9.0
Downloaded lock_api v0.4.11
Downloaded tracing-core v0.1.34
Downloaded tree-sitter-highlight v0.24.4
Downloaded noise-framework v0.4.0
Downloaded timeago v0.4.2
Downloaded unit-prefix v0.5.1
Downloaded value-bag-sval2 v1.11.1
Downloaded tree-sitter-html v0.23.2
Downloaded tree-sitter-css v0.23.1
Downloaded rustix v1.0.7
Downloaded fxhash v0.2.1
Downloaded icu_locid v1.5.0
Downloaded unicode-ident v1.0.12
Downloaded tree-sitter-language v0.1.2
Downloaded toml_writer v1.0.2
Downloaded writeable v0.5.5
Downloaded yansi v0.5.1
Downloaded icu_properties v1.5.1
Downloaded icu_normalizer_data v1.5.1
Downloaded gix-chunk v0.4.11
Downloaded zerofrom-derive v0.1.6
Downloaded litemap v0.7.5
Downloaded netservices v0.8.0
Downloaded test-log-macros v0.2.18
Downloaded thiserror v1.0.69
Downloaded idna_adapter v1.2.0
Downloaded gix-actor v0.33.2
Downloaded version_check v0.9.4
Downloaded vcpkg v0.2.15
Downloaded tinyvec_macros v0.1.1
Downloaded tinystr v0.7.6
Downloaded keccak v0.1.5
Downloaded maybe-async v0.2.10
Downloaded jobserver v0.1.31
Downloaded idna v1.0.3
Downloaded tree-sitter v0.24.4
Downloaded ssh-key v0.6.6
Downloaded indexmap v2.2.6
Downloaded tree-sitter-ruby v0.23.1
Downloaded icu_properties_data v1.5.1
Downloaded syn v1.0.109
Downloaded tracing-subscriber v0.3.19
Downloaded unicode-normalization v0.1.23
Downloaded sval_serde v2.14.1
Downloaded tree-sitter-typescript v0.23.2
Downloaded memchr v2.7.2
Downloaded libm v0.2.8
Downloaded libc v0.2.174
Downloaded tree-sitter-rust v0.23.2
Downloaded jsonschema v0.30.0
Downloaded tree-sitter-python v0.23.4
Downloaded toml v0.9.5
Downloaded tempfile v3.10.1
Downloaded tar v0.4.40
Downloaded lazy_static v1.5.0
Downloaded sval_fmt v2.14.1
Downloaded streaming-iterator v0.1.9
Downloaded lexopt v0.3.0
Downloaded mio v1.0.4
Downloaded mio v0.8.11
Downloaded tree-sitter-md v0.3.2
Downloaded tinyvec v1.6.0
Downloaded memmap2 v0.9.4
Downloaded stable_deref_trait v1.2.0
Downloaded ssh-encoding v0.2.0
Downloaded newline-converter v0.3.0
Downloaded thiserror-impl v2.0.12
Downloaded thiserror-impl v1.0.69
Downloaded miniz_oxide v0.8.8
Downloaded git2 v0.19.0
Downloaded zerocopy v0.7.35
Downloaded thread_local v1.1.9
Downloaded jiff v0.2.1
Downloaded test-log v0.2.18
Downloaded sval_buffer v2.14.1
Downloaded sqlite3-sys v0.15.2
Downloaded sqlite v0.32.0
Downloaded sval v2.14.1
Downloaded url v2.5.4
Downloaded sval_dynamic v2.14.1
Downloaded ssh-cipher v0.2.0
Downloaded spki v0.7.3
Downloaded nonempty v0.5.0
Downloaded thiserror v2.0.12
Downloaded gix-commitgraph v0.25.1
Downloaded gix-config-value v0.14.12
Downloaded gix-command v0.4.1
Downloaded getrandom v0.3.3
Downloaded tracing v0.1.41
Downloaded gix-pack v0.56.0
Downloaded zerovec v0.10.4
Downloaded sval_json v2.14.1
Downloaded getrandom v0.2.15
Downloaded zerofrom v0.1.6
Downloaded value-bag-serde1 v1.11.1
Downloaded multibase v0.9.1
Downloaded generic-array v0.14.7
Downloaded xattr v1.3.1
Downloaded vsimd v0.8.0
Downloaded uuid v1.16.0
Downloaded utf8parse v0.2.1
Downloaded typenum v1.17.0
Downloaded fraction v0.15.3
Downloaded yoke v0.7.5
Downloaded uuid-simd v0.8.0
Downloaded zeroize v1.7.0
Downloaded value-bag v1.11.1
Downloaded utf8_iter v1.0.4
Downloaded typeid v1.0.3
Downloaded tree-sitter-toml-ng v0.6.0
Downloaded tracing-log v0.2.0
Downloaded unicode-display-width v0.3.0
Downloaded gix-revision v0.31.1
Downloaded utf16_iter v1.0.5
Downloaded universal-hash v0.5.1
Downloaded gix-packetline v0.18.4
Downloaded linux-raw-sys v0.4.13
Downloaded icu_normalizer v1.5.0
Downloaded hashbrown v0.14.3
Downloaded gix-fs v0.12.1
Downloaded tree-sitter-json v0.24.8
Downloaded toml_datetime v0.7.0
Downloaded icu_collections v1.5.0
Downloaded group v0.13.0
Downloaded gix-validate v0.9.4
Downloaded gix-utils v0.1.14
Downloaded gix-odb v0.66.0
Downloaded gix-negotiate v0.17.0
Downloaded gix-lock v15.0.1
Downloaded gix-features v0.39.1
Downloaded gix-diff v0.49.0
Downloaded iana-time-zone v0.1.60
Downloaded gix-refspec v0.27.0
Downloaded gix-ref v0.49.1
Downloaded gix-quote v0.4.15
Downloaded gix-date v0.9.4
Downloaded gix-credentials v0.26.0
Downloaded home v0.5.9
Downloaded hmac v0.12.1
Downloaded gix-url v0.28.2
Downloaded gix-tempfile v15.0.0
Downloaded gix-shallow v0.1.0
Downloaded libgit2-sys v0.17.0+1.8.1
Downloaded gix-sec v0.10.12
Downloaded gix-revwalk v0.17.0
Downloaded gix-object v0.46.1
Downloaded zerovec-derive v0.10.3
Downloaded yoke-derive v0.7.5
Downloaded winnow v0.6.26
Downloaded walkdir v2.5.0
Downloaded unicode-width v0.2.1
Downloaded unicode-width v0.1.11
Downloaded unicode-segmentation v1.11.0
Downloaded tree-sitter-go v0.23.4
Downloaded tree-sitter-c v0.23.2
Downloaded tree-sitter-bash v0.23.3
Downloaded syn v2.0.89
Downloaded gimli v0.31.1
Downloaded sha3 v0.10.8
Downloaded linux-raw-sys v0.9.4
Downloaded regex-automata v0.4.9
Downloaded bstr v1.9.1
Downloaded inquire v0.7.5
Downloaded sqlite3-src v0.5.1
Downloaded indicatif v0.18.0
Downloaded sval_nested v2.14.1
Downloaded log v0.4.27
Downloaded emojis v0.6.4
Downloaded itertools v0.14.0
Downloaded regex-syntax v0.6.29
Downloaded object v0.36.7
Downloaded litrs v0.4.1
Downloaded inout v0.1.3
Downloaded regex-syntax v0.8.5
Downloaded icu_locid_transform_data v1.5.1
Downloaded der v0.7.9
Downloaded base64 v0.22.1
Downloaded backtrace v0.3.75
Downloaded localtime v1.3.1
Downloaded io-reactor v0.5.2
Downloaded crossterm v0.29.0
Downloaded base64 v0.21.7
Downloaded arc-swap v1.7.1
Downloaded anstream v0.6.13
Downloaded structured-logger v1.0.4
Downloaded rustix v0.38.34
Downloaded regex v1.11.1
Downloaded chacha20poly1305 v0.10.1
Downloaded p384 v0.13.0
Downloaded git-ref-format-core v0.3.1
Downloaded anstyle v1.0.6
Downloaded serde_json v1.0.140
Downloaded cyphernet v0.5.2
Downloaded chrono v0.4.38
Downloaded itoa v1.0.11
Downloaded gix-hashtable v0.6.0
Downloaded gix-hash v0.15.1
Downloaded git-ref-format-macro v0.3.1
Downloaded fast-glob v0.3.3
Downloaded ecdsa v0.16.9
Downloaded crypto-bigint v0.5.5
Downloaded autocfg v1.2.0
Downloaded ascii v1.1.0
Downloaded anstyle-parse v0.2.3
Downloaded amplify_syn v2.0.1
Downloaded regex-automata v0.1.10
Downloaded gix-trace v0.1.12
Downloaded rand v0.8.5
Downloaded filetime v0.2.23
Downloaded base64ct v1.6.0
Downloaded anstyle-query v1.0.2
Downloaded gix-traverse v0.43.1
Downloaded gix-prompt v0.9.1
Downloaded git-ref-format v0.3.1
Downloaded schemars v1.0.4
Downloaded fastrand v2.1.0
Downloaded escargot v0.5.10
Downloaded env_filter v0.1.3
Downloaded data-encoding-macro-internal v0.1.12
Downloaded bytes v1.10.1
Downloaded bcrypt-pbkdf v0.10.0
Downloaded base16ct v0.2.0
Downloaded p521 v0.13.3
Downloaded opaque-debug v0.3.1
Downloaded snapbox-macros v0.3.8
Downloaded fancy-regex v0.14.0
Downloaded crossbeam-channel v0.5.15
Downloaded base32 v0.4.0
Downloaded base-x v0.2.11
Downloaded ed25519 v1.5.3
Downloaded dunce v1.0.5
Downloaded cc v1.2.2
Downloaded serde v1.0.219
Downloaded schemars_derive v1.0.4
Downloaded pretty_assertions v1.4.0
Downloaded erased-serde v0.4.6
Downloaded email_address v0.2.9
Downloaded siphasher v0.3.11
Downloaded similar v2.5.0
Downloaded signature v2.2.0
Downloaded signature v1.6.4
Downloaded signal-hook-registry v1.4.5
Downloaded shlex v1.3.0
Downloaded sharded-slab v0.1.7
Downloaded sha2 v0.10.8
Downloaded sha1_smol v1.0.0
Downloaded serde_fmt v1.0.3
Downloaded serde_derive v1.0.219
Downloaded serde-untagged v0.1.7
Downloaded scrypt v0.11.0
Downloaded scopeguard v1.2.0
Downloaded libz-sys v1.1.16
Downloaded ryu v1.0.17
Downloaded rfc6979 v0.4.0
Downloaded referencing v0.30.0
Downloaded ref-cast-impl v1.0.24
Downloaded ref-cast v1.0.24
Downloaded radicle-std-ext v0.1.0
Downloaded radicle-git-ext v0.8.1
Downloaded quote v1.0.36
Downloaded qcheck-macros v1.0.0
Downloaded qcheck v1.0.0
Downloaded prodash v29.0.2
Downloaded proc-macro-error v1.0.4
Downloaded primeorder v0.13.6
Downloaded parking_lot_core v0.9.9
Downloaded parking_lot v0.12.3
Downloaded p256 v0.13.2
Downloaded overload v0.1.1
Downloaded outref v0.5.2
Downloaded os_info v3.12.0
Downloaded once_cell v1.21.3
Downloaded num-traits v0.2.19
Downloaded num-iter v0.1.45
Downloaded dyn-clone v1.0.17
Downloaded cyphergraphy v0.3.0
Downloaded cypheraddr v0.4.0
Downloaded ctr v0.9.2
Downloaded crypto-common v0.1.6
Downloaded crossbeam-utils v0.8.19
Downloaded crc32fast v1.4.0
Downloaded const-oid v0.9.6
Downloaded cfg-if v1.0.0
Downloaded borrow-or-share v0.2.2
Downloaded bit-set v0.8.0
Downloaded base64 v0.13.1
Downloaded smallvec v1.13.2
Downloaded siphasher v1.0.1
Downloaded signals_receipts v0.2.0
Downloaded signal-hook-mio v0.2.4
Downloaded signal-hook v0.3.18
Downloaded serde_spanned v1.0.0
Downloaded sem_safe v0.2.0
Downloaded sec1 v0.7.3
Downloaded salsa20 v0.10.2
Downloaded rustc-demangle v0.1.26
Downloaded rand_core v0.6.4
Downloaded rand_chacha v0.3.1
Downloaded proc-macro2 v1.0.92
Downloaded proc-macro-error-attr v1.0.4
Downloaded fluent-uri v0.3.2
Downloaded flate2 v1.1.1
Downloaded errno v0.3.13
Downloaded equivalent v1.0.1
Downloaded either v1.11.0
Downloaded document-features v0.2.11
Downloaded displaydoc v0.2.5
Downloaded diff v0.1.13
Downloaded derive_more v2.0.1
Downloaded data-encoding v2.5.0
Downloaded cpufeatures v0.2.12
Downloaded chacha20 v0.9.1
Downloaded bytesize v2.0.1
Downloaded byteorder v1.5.0
Downloaded bytecount v0.6.8
Downloaded env_logger v0.11.8
Downloaded digest v0.10.7
Downloaded console v0.16.0
Downloaded num-cmp v0.1.0
Downloaded cipher v0.4.4
Downloaded aes-gcm v0.10.3
Downloaded pkg-config v0.3.30
Downloaded pkcs8 v0.10.2
Downloaded paste v1.0.15
Downloaded elliptic-curve v0.13.8
Downloaded cbc v0.1.2
Downloaded pem-rfc7468 v0.7.0
Downloaded nu-ansi-term v0.46.0
Downloaded aes v0.8.4
Downloaded bit-vec v0.8.0
Downloaded aho-corasick v1.1.3
Downloaded ahash v0.8.11
Downloaded aead v0.5.2
Downloaded pkcs1 v0.7.5
Downloaded phf v0.11.3
Downloaded block-padding v0.3.3
Downloaded block-buffer v0.10.4
Downloaded bitflags v2.9.1
Downloaded bitflags v1.3.2
Downloaded num-bigint v0.4.6
Downloaded num v0.4.3
Downloaded amplify_derive v4.0.0
Downloaded ec25519 v0.1.0
Downloaded data-encoding-macro v0.1.14
Downloaded amplify_num v0.5.2
Compiling libc v0.2.174
Compiling proc-macro2 v1.0.92
Compiling unicode-ident v1.0.12
Checking cfg-if v1.0.0
Compiling serde v1.0.219
Compiling shlex v1.3.0
Compiling version_check v0.9.4
Compiling typeid v1.0.3
Compiling quote v1.0.36
Compiling jobserver v0.1.31
Compiling syn v2.0.89
Checking memchr v2.7.2
Compiling autocfg v1.2.0
Compiling cc v1.2.2
Checking smallvec v1.13.2
Checking getrandom v0.2.15
Checking aho-corasick v1.1.3
Compiling typenum v1.17.0
Checking regex-syntax v0.8.5
Compiling generic-array v0.14.7
Checking rand_core v0.6.4
Checking fastrand v2.1.0
Checking bitflags v2.9.1
Compiling lock_api v0.4.11
Checking regex-automata v0.4.9
Compiling parking_lot_core v0.9.9
Checking crypto-common v0.1.6
Compiling synstructure v0.13.1
Checking scopeguard v1.2.0
Checking parking_lot v0.12.3
Checking once_cell v1.21.3
Checking stable_deref_trait v1.2.0
Checking subtle v2.5.0
Checking tinyvec_macros v0.1.1
Compiling syn v1.0.109
Checking tinyvec v1.6.0
Checking zeroize v1.7.0
Compiling thiserror v2.0.12
Compiling serde_derive v1.0.219
Compiling zerofrom-derive v0.1.6
Compiling yoke-derive v0.7.5
Checking bstr v1.9.1
Compiling zerovec-derive v0.10.3
Checking zerofrom v0.1.6
Compiling displaydoc v0.2.5
Checking yoke v0.7.5
Checking zerovec v0.10.4
Checking unicode-normalization v0.1.23
Compiling thiserror-impl v2.0.12
Checking cpufeatures v0.2.12
Checking tinystr v0.7.6
Compiling crc32fast v1.4.0
Checking writeable v0.5.5
Checking litemap v0.7.5
Compiling icu_locid_transform_data v1.5.1
Checking icu_locid v1.5.0
Compiling icu_provider_macros v1.5.0
Checking block-padding v0.3.3
Checking itoa v1.0.11
Compiling icu_properties_data v1.5.1
Checking hashbrown v0.14.3
Checking icu_provider v1.5.0
Checking erased-serde v0.4.6
Checking serde_fmt v1.0.3
Checking inout v0.1.3
Checking block-buffer v0.10.4
Compiling icu_normalizer_data v1.5.1
Checking value-bag-serde1 v1.11.1
Checking value-bag v1.11.1
Compiling pkg-config v0.3.30
Checking digest v0.10.7
Checking log v0.4.27
Checking icu_locid_transform v1.5.0
Checking cipher v0.4.4
Checking icu_collections v1.5.0
Compiling thiserror v1.0.69
Checking adler2 v2.0.0
Checking utf8_iter v1.0.4
Checking utf16_iter v1.0.5
Checking write16 v1.0.0
Checking miniz_oxide v0.8.8
Compiling thiserror-impl v1.0.69
Checking icu_properties v1.5.1
Compiling rustix v0.38.34
Checking percent-encoding v2.3.1
Checking linux-raw-sys v0.4.13
Checking sha2 v0.10.8
Checking gix-trace v0.1.12
Checking form_urlencoded v1.2.1
Checking universal-hash v0.5.1
Checking opaque-debug v0.3.1
Compiling vcpkg v0.2.15
Checking faster-hex v0.9.0
Checking icu_normalizer v1.5.0
Compiling amplify_syn v2.0.1
Checking idna_adapter v1.2.0
Compiling data-encoding v2.5.0
Checking idna v1.0.3
Compiling libz-sys v1.1.16
Checking url v2.5.4
Compiling amplify_derive v4.0.0
Compiling data-encoding-macro-internal v0.1.12
Checking tempfile v3.10.1
Checking gix-utils v0.1.14
Checking ascii v1.1.0
Checking signature v1.6.4
Checking amplify_num v0.5.2
Checking ed25519 v1.5.3
Checking data-encoding-macro v0.1.14
Checking gix-hash v0.15.1
Compiling libgit2-sys v0.17.0+1.8.1
Checking aead v0.5.2
Compiling num-traits v0.2.19
Compiling proc-macro-error-attr v1.0.4
Checking base-x v0.2.11
Checking ct-codecs v1.1.1
Checking byteorder v1.5.0
Checking same-file v1.0.6
Checking ec25519 v0.1.0
Checking walkdir v2.5.0
Checking multibase v0.9.1
Checking flate2 v1.1.1
Checking poly1305 v0.8.0
Checking amplify v4.6.0
Checking chacha20 v0.9.1
Checking prodash v29.0.2
Compiling proc-macro-error v1.0.4
Checking sha1_smol v1.0.0
Checking cyphergraphy v0.3.0
Checking gix-features v0.39.1
Checking equivalent v1.0.1
Compiling crossbeam-utils v0.8.19
Checking keccak v0.1.5
Compiling serde_json v1.0.140
Checking sha3 v0.10.8
Checking indexmap v2.2.6
Compiling git-ref-format-core v0.3.1
Checking polyval v0.6.2
Compiling sqlite3-src v0.5.1
Checking hmac v0.12.1
Checking ryu v1.0.17
Checking base32 v0.4.0
Checking ppv-lite86 v0.2.17
Checking home v0.5.9
Checking base64ct v1.6.0
Checking pem-rfc7468 v0.7.0
Checking rand_chacha v0.3.1
Checking gix-path v0.10.15
Checking cypheraddr v0.4.0
Checking pbkdf2 v0.12.2
Checking ghash v0.5.1
Compiling git-ref-format-macro v0.3.1
Checking chacha20poly1305 v0.10.1
Checking aes v0.8.4
Checking ctr v0.9.2
Checking git-ref-format v0.3.1
Checking aes-gcm v0.10.3
Checking noise-framework v0.4.0
Checking crossbeam-channel v0.5.15
Checking socks5-client v0.4.1
Checking rand v0.8.5
Checking ssh-encoding v0.2.0
Checking blowfish v0.9.1
Checking cbc v0.1.2
Compiling ref-cast v1.0.24
Checking radicle-std-ext v0.1.0
Checking ssh-cipher v0.2.0
Checking bcrypt-pbkdf v0.10.0
Checking cyphernet v0.5.2
Compiling ref-cast-impl v1.0.24
Checking signature v2.2.0
Checking ssh-key v0.6.6
Checking qcheck v1.0.0
Checking radicle-ssh v0.10.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-ssh)
Checking lazy_static v1.5.0
Checking dyn-clone v1.0.17
Checking jiff v0.2.1
Checking siphasher v1.0.1
Checking nonempty v0.9.0
Compiling serde_derive_internals v0.29.1
Checking radicle-dag v0.10.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-dag)
Checking winnow v0.6.26
Checking gix-date v0.9.4
Compiling schemars_derive v1.0.4
Checking gix-actor v0.33.2
Checking gix-hashtable v0.6.0
Checking gix-validate v0.9.4
Checking iana-time-zone v0.1.60
Checking chrono v0.4.38
Checking gix-object v0.46.1
Checking schemars v1.0.4
Checking colored v2.1.0
Checking serde-untagged v0.1.7
Checking localtime v1.3.1
Checking bytesize v2.0.1
Checking memmap2 v0.9.4
Checking anstyle-query v1.0.2
Checking tree-sitter-language v0.1.2
Checking dunce v1.0.5
Checking base64 v0.21.7
Checking fast-glob v0.3.3
Checking gix-chunk v0.4.11
Checking utf8parse v0.2.1
Checking gix-commitgraph v0.25.1
Checking anstyle-parse v0.2.3
Compiling rustix v1.0.7
Checking anstyle v1.0.6
Checking colorchoice v1.0.0
Checking anstream v0.6.13
Checking gix-revwalk v0.17.0
Checking gix-fs v0.12.1
Checking linux-raw-sys v0.9.4
Checking gix-tempfile v15.0.0
Checking sem_safe v0.2.0
Checking errno v0.3.13
Checking either v1.11.0
Checking shell-words v1.1.0
Checking gix-command v0.4.1
Checking signals_receipts v0.2.0
Compiling object v0.36.7
Compiling signal-hook v0.3.18
Checking gix-lock v15.0.1
Checking gix-url v0.28.2
Checking gix-config-value v0.14.12
Checking gix-quote v0.4.15
Checking gix-sec v0.10.12
Checking signal-hook-registry v1.4.5
Compiling getrandom v0.3.3
Checking gimli v0.31.1
Checking gix-prompt v0.9.1
Checking addr2line v0.24.2
Checking radicle-signals v0.11.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-signals)
Checking gix-revision v0.31.1
Checking gix-traverse v0.43.1
Checking gix-diff v0.49.0
Checking gix-packetline v0.18.4
Checking mio v1.0.4
Checking mio v0.8.11
Checking sqlite3-sys v0.15.2
Compiling tree-sitter v0.24.4
Checking sqlite v0.32.0
Compiling anyhow v1.0.82
Checking rustc-demangle v0.1.26
Compiling unicode-segmentation v1.11.0
Compiling convert_case v0.7.1
Checking backtrace v0.3.75
Checking signal-hook-mio v0.2.4
Checking gix-transport v0.44.0
Checking gix-pack v0.56.0
Checking gix-refspec v0.27.0
Checking gix-credentials v0.26.0
Checking gix-ref v0.49.1
Checking gix-shallow v0.1.0
Checking gix-negotiate v0.17.0
Checking regex v1.11.1
Compiling maybe-async v0.2.10
Checking arc-swap v1.7.1
Compiling portable-atomic v1.11.0
Checking gix-odb v0.66.0
Checking gix-protocol v0.47.0
Checking uuid v1.16.0
Compiling xattr v1.3.1
Compiling derive_more-impl v2.0.1
Compiling filetime v0.2.23
Checking lexopt v0.3.0
Checking bitflags v1.3.2
Checking bytes v1.10.1
Checking unicode-width v0.2.1
Compiling litrs v0.4.1
Checking console v0.16.0
Checking derive_more v2.0.1
Checking crossterm v0.25.0
Compiling tar v0.4.40
Compiling document-features v0.2.11
Checking newline-converter v0.3.0
Checking snapbox-macros v0.3.8
Checking fxhash v0.2.1
Checking salsa20 v0.10.2
Checking siphasher v0.3.11
Checking unicode-width v0.1.11
Checking similar v2.5.0
Checking normalize-line-endings v0.3.0
Checking streaming-iterator v0.1.9
Checking unit-prefix v0.5.1
Checking indicatif v0.18.0
Checking snapbox v0.4.17
Checking inquire v0.7.5
Checking bloomy v1.2.0
Checking scrypt v0.11.0
Compiling radicle-surf v0.22.0
Checking crossterm v0.29.0
Checking unicode-display-width v0.3.0
Checking systemd-journal-logger v2.2.2
Checking serde_spanned v1.0.0
Checking toml_datetime v0.7.0
Compiling tree-sitter-rust v0.23.2
Compiling tree-sitter-toml-ng v0.6.0
Compiling tree-sitter-typescript v0.23.2
Compiling tree-sitter-md v0.3.2
Compiling tree-sitter-ruby v0.23.1
Compiling tree-sitter-c v0.23.2
Compiling tree-sitter-python v0.23.4
Compiling tree-sitter-bash v0.23.3
Compiling tree-sitter-html v0.23.2
Compiling tree-sitter-go v0.23.4
Compiling tree-sitter-json v0.24.8
Compiling tree-sitter-css v0.23.1
Checking popol v3.0.0
Checking pin-project-lite v0.2.16
Checking toml_writer v1.0.2
Checking tokio v1.47.1
Checking toml v0.9.5
Checking io-reactor v0.5.2
Checking os_info v3.12.0
Checking socket2 v0.5.7
Checking yansi v0.5.1
Compiling radicle-node v0.15.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-node)
Checking nonempty v0.5.0
Checking diff v0.1.13
Checking base64 v0.13.1
Compiling radicle-cli v0.16.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-cli)
Checking pretty_assertions v1.4.0
Checking netservices v0.8.0
Checking human-panic v2.0.3
Checking structured-logger v1.0.4
Checking radicle-systemd v0.10.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-systemd)
Checking tree-sitter-highlight v0.24.4
Checking itertools v0.14.0
Checking num-integer v0.1.46
Checking timeago v0.4.2
Compiling escargot v0.5.10
Compiling qcheck-macros v1.0.0
Checking num-bigint v0.4.6
Compiling ahash v0.8.11
Checking num-iter v0.1.45
Checking num-complex v0.4.6
Checking env_filter v0.1.3
Checking zerocopy v0.7.35
Checking borrow-or-share v0.2.2
Checking bit-vec v0.8.0
Checking fluent-uri v0.3.2
Checking bit-set v0.8.0
Checking num-rational v0.4.2
Checking env_logger v0.11.8
Checking num v0.4.3
Checking phf_shared v0.11.3
Compiling test-log-macros v0.2.18
Checking outref v0.5.2
Checking vsimd v0.8.0
Compiling paste v1.0.15
Compiling radicle-remote-helper v0.13.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-remote-helper)
Checking uuid-simd v0.8.0
Checking test-log v0.2.18
Checking phf v0.11.3
Checking referencing v0.30.0
Checking fraction v0.15.3
Checking fancy-regex v0.14.0
Checking email_address v0.2.9
Checking num-cmp v0.1.0
Checking base64 v0.22.1
Checking bytecount v0.6.8
Checking emojis v0.6.4
Checking jsonschema v0.30.0
Checking git2 v0.19.0
Checking radicle-git-ext v0.8.1
Checking radicle-term v0.15.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-term)
Checking radicle-crypto v0.13.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-crypto)
Checking radicle-cob v0.16.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-cob)
Checking radicle v0.19.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle)
Checking radicle-fetch v0.15.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-fetch)
Checking radicle-cli-test v0.13.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-cli-test)
Checking radicle-protocol v0.3.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-protocol)
Checking radicle-schemars v0.5.0 (/88826098-6158-4b40-8959-7e2c10c4b538/w/crates/radicle-schemars)
error: the borrowed expression implements the required traits
--> crates/radicle-node/src/fingerprint.rs:112:30
|
112 | let home = Home::new(&tmp.path()).unwrap();
| ^^^^^^^^^^^ help: change this to: `tmp.path()`
|
= help: for further information visit https://rust-lang.github.io/rust-clippy/master/index.html#needless_borrows_for_generic_args
= note: `-D clippy::needless-borrows-for-generic-args` implied by `-D warnings`
= help: to override `-D warnings` add `#[allow(clippy::needless_borrows_for_generic_args)]`
error: could not compile `radicle-node` (lib test) due to 1 previous error
warning: build failed, waiting for other jobs to finish...
Exit code: 101
{
"response": "finished",
"result": "failure"
}