Fix verification CI (#104)

* install setuptools
* move toolchain file
* check cargo version
* fix refinedrust version for updated cargo
* update dependencies in cove tap tool to match with the new Cargo
* use correct version of the cargo lock

---------

Signed-off-by: Wojciech Ozga <[email protected]>
Co-authored-by: Lennard Gäher <[email protected]>

Author: wojciechozga

.github/workflows/build.yml

@@ -14,15 +14,15 @@ jobs:
       with:
         submodules: 'true'
     - name: install build dependencies
-      run: sudo apt -qq -y install autoconf automake autotools-dev curl python3 libmpc-dev libmpfr-dev libgmp-dev gawk build-essential bison flex texinfo gperf libtool patchutils bc zlib1g-dev libexpat-dev
+      run: sudo apt-get update -y && sudo apt-get -qq -y install autoconf automake autotools-dev curl python3 libmpc-dev libmpfr-dev libgmp-dev gawk build-essential bison flex texinfo gperf libtool patchutils bc zlib1g-dev libexpat-dev
     - name: install OpenSBI dependencies
-      run: sudo apt -qq -y install clang
+      run: sudo apt-get update -y && sudo apt-get -qq -y install clang
     - name: install Qemu dependencies
-      run: sudo apt -qq -y install git libglib2.0-dev libfdt-dev libpixman-1-dev zlib1g-dev ninja-build python3-venv libslirp-dev xz-utils
+      run: sudo apt-get update -y && sudo apt-get -qq -y install git libglib2.0-dev libfdt-dev libpixman-1-dev zlib1g-dev ninja-build python3-venv libslirp-dev xz-utils
     - name: install Buildroot dependencies
-      run: sudo apt -qq -y install unzip sed binutils diffutils build-essential bash patch gzip bzip2 perl tar cpio unzip rsync file bc findutils
+      run: sudo apt-get update -y && sudo apt-get -qq -y install unzip sed binutils diffutils build-essential bash patch gzip bzip2 perl tar cpio unzip rsync file bc findutils
     - name: install utilities
-      run: sudo apt install -y sshpass
+      run: sudo apt-get update -y && sudo apt-get -qq install -y sshpass
     - name: install rust
       run: curl https://sh.rustup.rs -sSf | sh -s -- -y
     - name: install rust nightly
@@ -31,8 +31,6 @@ jobs:
       run: rustup target add riscv64gc-unknown-none-elf
     - name: install rust nightly
       run: rustup component add rustfmt
-    - name: install cargo utils
-      run: cargo install cargo-binutils
     - name: build riscv toolchain
       run: ACE_DIR=$(pwd)/build/ MAKEFLAGS="--silent -j4" make devtools
     - name: build emulator

.github/workflows/verify.yml

@@ -15,7 +15,7 @@ jobs:
         persist-credentials: false
         submodules: 'true'
     - name: Install opam dependencies
-      run: sudo apt update -y && sudo apt install -y pkg-config git rsync tar unzip m4 time curl ocaml build-essential bubblewrap gawk libgmp-dev python2.7 python3 python3-distutils libmpfr-dev
+      run: sudo apt update -y && sudo apt install -y pkg-config git rsync tar unzip m4 time curl ocaml build-essential bubblewrap gawk libgmp-dev python3 python-is-python3 libmpfr-dev && python3 -m pip install setuptools
     - name: Install opam
       run: curl "https://github.com/ocaml/opam/releases/download/2.1.5/opam-2.1.5-x86_64-linux" -Lo /usr/local/bin/opam && chmod +x /usr/local/bin/opam
     - name: Setup opam
@@ -40,6 +40,8 @@ jobs:
       run: eval $(opam env) && REFINEDRUST_ROOT=$PWD/verification/refinedrust ./verification/refinedrust/scripts/setup-coq.sh
     - name: Install RefinedRust type system
       run: eval $(opam env) && REFINEDRUST_ROOT=$PWD/verification/refinedrust ./verification/refinedrust/scripts/install-typesystem.sh
+    - name: Check cargo version
+      run: cargo --version 
     - name: Install RefinedRust stdlib
       run: eval $(opam env) && REFINEDRUST_ROOT=$PWD/verification/refinedrust ./verification/refinedrust/scripts/install-stdlib.sh
     - name: Generate stdlib metadata

security-monitor/rust-toolchain.toml renamed to rust-toolchain.toml

@@ -6,15 +6,13 @@ description = "Library to parse the RISC-V CoVE's TEE attestation payload"
 edition = "2021"
 
 [dependencies]
-#rsa = "0.9" # to create lockboxes: encrypt symetric key using public keys of target TEEs
-
-rand = {version = "0.8", optional=true}
+rand = {version = "0.8.5", optional=true}
 
 hybrid-array = "=0.2.0-rc.9"
 ml-kem = {version = "=0.2.0", default-features=false, features = [] }
 
 # for symmetric encryption of payload
-aes-gcm = {version="0.10.3", default-features = false, features=["aes", "alloc"]}
+aes-gcm = {version="0.10.3", default-features = false, features=["aes", "alloc", "rand_core"]}
 
 # provides macros that help removing boilerplate code in rust error handling
 thiserror-no-std = "2.0"