[package]
edition = "2024"
rust-version = "1.89"
name = "kavach"
version = "1.0.1"
build = false
autolib = false
autobins = false
autoexamples = false
autotests = false
autobenches = false
description = "Sandbox execution framework — backend abstraction, strength scoring, policy engine, credential proxy, and audit hooks"
homepage = "https://github.com/MacCracken/kavach"
readme = "README.md"
keywords = [
"sandbox",
"security",
"isolation",
"container",
"wasm",
]
categories = [
"os",
"web-programming",
]
license = "AGPL-3.0-only"
repository = "https://github.com/MacCracken/kavach"
[features]
attestation = ["dep:ear"]
default = ["process"]
firecracker = ["dep:tempfile"]
full = [
"process",
"gvisor",
"firecracker",
"wasm",
"oci",
"sgx",
"sev",
"sy-agnos",
]
gvisor = [
"dep:oci-spec",
"dep:tempfile",
]
oci = [
"dep:oci-spec",
"dep:tempfile",
]
process = [
"dep:seccompiler",
"dep:landlock",
"dep:nix",
"dep:caps",
"dep:regex",
]
sev = ["dep:tempfile"]
sgx = ["dep:tempfile"]
sigstore = ["dep:sigstore"]
sy-agnos = ["dep:tempfile"]
wasm = [
"dep:wasmtime",
"dep:wasmtime-wasi",
]
[lib]
name = "kavach"
path = "src/lib.rs"
[[bin]]
name = "kavach"
path = "src/main.rs"
[[test]]
name = "adversarial"
path = "tests/adversarial.rs"
[[bench]]
name = "sandbox"
path = "benches/sandbox.rs"
harness = false
[dependencies.anyhow]
version = "1"
[dependencies.async-trait]
version = "0.1"
[dependencies.chrono]
version = "0.4"
features = ["serde"]
[dependencies.clap]
version = "4"
features = ["derive"]
[dependencies.ear]
version = "0.5"
optional = true
[dependencies.hmac]
version = "0.12"
[dependencies.regex]
version = "1"
optional = true
[dependencies.serde]
version = "1"
features = ["derive"]
[dependencies.serde_json]
version = "1"
[dependencies.sha2]
version = "0.10"
[dependencies.sigstore]
version = "0.13"
optional = true
default-features = false
[dependencies.thiserror]
version = "2"
[dependencies.tokio]
version = "1"
features = [
"rt-multi-thread",
"macros",
"process",
"time",
"sync",
"fs",
"io-util",
"net",
]
[dependencies.tracing]
version = "0.1"
[dependencies.uuid]
version = "1"
features = [
"v4",
"serde",
]
[dev-dependencies.criterion]
version = "0.5"
features = ["html_reports"]
[dev-dependencies.tempfile]
version = "3"
[dev-dependencies.tokio-test]
version = "0.4"
[target.'cfg(target_os = "linux")'.dependencies.caps]
version = "0.5"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.landlock]
version = "0.4"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.nix]
version = "0.29"
features = [
"sched",
"process",
"signal",
"resource",
]
optional = true
[target.'cfg(target_os = "linux")'.dependencies.oci-spec]
version = "0.7"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.seccompiler]
version = "0.4"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.tempfile]
version = "3"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.wasmtime]
version = "42"
optional = true
[target.'cfg(target_os = "linux")'.dependencies.wasmtime-wasi]
version = "42"
optional = true
[target."cfg(unix)".dependencies.libc]
version = "0.2"