Merge pull request #2016 from kristof-mattei/r2

feat: restrict ALL

Author: kristof-mattei

Cargo.lock

@@ -19,12 +19,141 @@ complexity = "warn"
 correctness = "warn"
 pedantic = "warn"
 perf = "warn"
-# restriction = "warn"
 style = "warn"
 suspicious = "warn"
 
+# restriction
+
+# Lib only
+# alloc_instead_of_core = { level = "deny", priority = 127 }
+# std_instead_of_alloc = { level = "deny", priority = 127 }
+# std_instead_of_core = { level = "deny", priority = 127 }
+# exhaustive_enums = { level = "deny", priority = 127 }
+# exhaustive_structs = { level = "deny", priority = 127 }
+# empty_enum_variants_with_brackets = { level = "deny", priority = 127 }
+# empty_structs_with_brackets = { level = "deny", priority = 127 }
+# missing_inline_in_public_items = { level = "deny", priority = 127 }
+
+absolute_paths = { level = "deny", priority = 127 }
+allow_attributes = { level = "deny", priority = 127 }
+allow_attributes_without_reason = { level = "deny", priority = 127 }
+# Debatable
+# arithmetic_side_effects = { level = "deny", priority = 127 }
+as_conversions = { level = "deny", priority = 127 }
+as_pointer_underscore = { level = "deny", priority = 127 }
+as_underscore = { level = "deny", priority = 127 }
+assertions_on_result_states = { level = "deny", priority = 127 }
+big_endian_bytes = { level = "deny", priority = 127 }
+cfg_not_test = { level = "deny", priority = 127 }
 # ensure we do Arc::clone(&arc) instead of arc.clone()
 clone_on_ref_ptr = { level = "deny", priority = 127 }
+create_dir = { level = "deny", priority = 127 }
+dbg_macro = { level = "deny", priority = 127 }
+decimal_literal_representation = { level = "deny", priority = 127 }
+# Debatable
+# default_numeric_fallback = { level = "deny", priority = 127 }
+default_union_representation = { level = "deny", priority = 127 }
+deref_by_slicing = { level = "deny", priority = 127 }
+doc_include_without_cfg = { level = "deny", priority = 127 }
+else_if_without_else = { level = "deny", priority = 127 }
+empty_drop = { level = "deny", priority = 127 }
+error_impl_error = { level = "deny", priority = 127 }
+exit = { level = "deny", priority = 127 }
+field_scoped_visibility_modifiers = { level = "deny", priority = 127 }
+filetype_is_file = { level = "deny", priority = 127 }
+# Debatable
+# float_arithmetic = { level = "deny", priority = 127 }
+float_cmp_const = { level = "deny", priority = 127 }
+fn_to_numeric_cast_any = { level = "deny", priority = 127 }
+# Debatable
+# get_unwrap = { level = "deny", priority = 127 }
+host_endian_bytes = { level = "deny", priority = 127 }
+# Debatable
+# if_then_some_else_none = { level = "deny", priority = 127 }
+impl_trait_in_params = { level = "deny", priority = 127 }
+# Debatable
+# indexing_slicing = { level = "deny", priority = 127 }
+infinite_loop = { level = "deny", priority = 127 }
+inline_asm_x86_att_syntax = { level = "deny", priority = 127 }
+# Debatable
+# integer_division = { level = "deny", priority = 127 }
+# Debatable
+# integer_division_remainder_used = { level = "deny", priority = 127 }
+iter_over_hash_type = { level = "deny", priority = 127 }
+large_include_file = { level = "deny", priority = 127 }
+let_underscore_must_use = { level = "deny", priority = 127 }
+let_underscore_untyped = { level = "deny", priority = 127 }
+little_endian_bytes = { level = "deny", priority = 127 }
+lossy_float_literal = { level = "deny", priority = 127 }
+# Debatable
+# map_err_ignore = { level = "deny", priority = 127 }
+map_with_unused_argument_over_ranges = { level = "deny", priority = 127 }
+missing_assert_message = { level = "deny", priority = 127 }
+mixed_read_write_in_expression = { level = "deny", priority = 127 }
+mod_module_files = { level = "deny", priority = 127 }
+# Debatable
+# module_name_repetitions = { level = "deny", priority = 127 }
+modulo_arithmetic = { level = "deny", priority = 127 }
+multiple_inherent_impl = { level = "deny", priority = 127 }
+multiple_unsafe_ops_per_block = { level = "deny", priority = 127 }
+mutex_atomic = { level = "deny", priority = 127 }
+mutex_integer = { level = "deny", priority = 127 }
+needless_raw_strings = { level = "deny", priority = 127 }
+non_ascii_literal = { level = "deny", priority = 127 }
+non_zero_suggestions = { level = "deny", priority = 127 }
+panic_in_result_fn = { level = "deny", priority = 127 }
+# Debatable
+# partial_pub_fields = { level = "deny", priority = 127 }
+pattern_type_mismatch = { level = "deny", priority = 127 }
+precedence_bits = { level = "deny", priority = 127 }
+# Debatable
+# print_stderr = { level = "deny", priority = 127 }
+# Debatable
+# print_stdout = { level = "deny", priority = 127 }
+pub_use = { level = "deny", priority = 127 }
+pub_without_shorthand = { level = "deny", priority = 127 }
+rc_buffer = { level = "deny", priority = 127 }
+rc_mutex = { level = "deny", priority = 127 }
+redundant_test_prefix = { level = "deny", priority = 127 }
+renamed_function_params = { level = "deny", priority = 127 }
+rest_pat_in_fully_bound_structs = { level = "deny", priority = 127 }
+return_and_then = { level = "deny", priority = 127 }
+# Debatable, need to think about it
+# same_name_method = { level = "deny", priority = 127 }
+semicolon_inside_block = { level = "deny", priority = 127 }
+# Debatable
+# shadow_reuse = { level = "deny", priority = 127 }
+# Debatable
+# shadow_same = { level = "deny", priority = 127 }
+# Debatable
+# shadow_unrelated = { level = "deny", priority = 127 }
+str_to_string = { level = "deny", priority = 127 }
+string_add = { level = "deny", priority = 127 }
+string_lit_chars_any = { level = "deny", priority = 127 }
+# Debatable, but no
+# string_slice = { level = "deny", priority = 127 }
+string_to_string = { level = "deny", priority = 127 }
+suspicious_xor_used_as_pow = { level = "deny", priority = 127 }
+tests_outside_test_module = { level = "deny", priority = 127 }
+todo = { level = "deny", priority = 127 }
+try_err = { level = "deny", priority = 127 }
+undocumented_unsafe_blocks = { level = "deny", priority = 127 }
+unimplemented = { level = "deny", priority = 127 }
+unnecessary_safety_comment = { level = "deny", priority = 127 }
+unnecessary_safety_doc = { level = "deny", priority = 127 }
+unnecessary_self_imports = { level = "deny", priority = 127 }
+unneeded_field_pattern = { level = "deny", priority = 127 }
+# No, to signify invariants
+# unreachable = { level = "deny", priority = 127 }
+unseparated_literal_suffix = { level = "deny", priority = 127 }
+unused_result_ok = { level = "deny", priority = 127 }
+unused_trait_names = { level = "deny", priority = 127 }
+# No, we separate fatal from recoverable
+# unwrap_in_result = { level = "deny", priority = 127 }
+verbose_file_reads = { level = "deny", priority = 127 }
+wildcard_enum_match_arm = { level = "deny", priority = 127 }
+
+# end restriction
 
 # this has 0 performance implications, the binding is compiled away, and it could cause issues
 # when done blindly, plus it makes it harder to debug as you cannot put breakpoints on return
@@ -38,6 +167,12 @@ multiple_crate_versions = { level = "allow", priority = 127 }
 # issues when refactoring
 needless_continue = { level = "allow", priority = 127 }
 
+# fights with `pattern_type_mismatch`
+needless_borrowed_reference = { level = "allow", priority = 127 }
+
+# Conflicts with `else_if_without_else`
+redundant_else = { level = "allow", priority = 127 }
+
 # this one causes confusion when combining variables (`foo`) and
 # dereferenced variables (`foo.bar`). The latter cannot be inlined
 # so we don't inline anything
@@ -49,7 +184,3 @@ non_ascii_idents = { level = "deny", priority = 127 }
 
 [dependencies]
 color-eyre = "0.6.5"
-
-# OpenSSL for musl
-[target.'cfg(all(any(target_arch="x86_64", target_arch="aarch64"), target_os="linux", target_env="musl"))'.dependencies]
-openssl = { version = "0.10.73", features = ["vendored"] }

Cargo.toml

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+set -e
+
+build() {
+    APPLICATION_NAME=$1
+    PLATFORM=$2
+    docker build \
+        --file Dockerfile . \
+        --tag $APPLICATION_NAME:latest \
+        --build-arg APPLICATION_NAME=$APPLICATION_NAME \
+        --platform $PLATFORM \
+        --progress=plain
+}
+
+name=$(basename ${PWD})
+
+build $name linux/amd64
+build $name linux/arm64

build-all.sh

@@ -0,0 +1 @@
+absolute-paths-allowed-crates = ["std"]

clippy.toml

@@ -33,6 +33,7 @@ fn quz() -> &'static str {
     "Quz"
 }
 
+#[expect(clippy::todo, reason = "Seed code")]
 fn main() -> Result<(), color_eyre::Report> {
     color_eyre::install()?;
 

src/main.rs

@@ -1,3 +1,5 @@
+#![expect(clippy::tests_outside_test_module, reason = "Integration tests")]
+
 #[test]
 fn assert_world_ok() {
     let cls1 = || true;