tests: Install tools with --locked option

[ Upstream commit 8bb8831 ] Without `--locked` option, installing cargo tools may fail for some reasons. `--locked` option is useful for reproducible installation since it ensures to use the exact same set of dependencies. Signed-off-by: Takahiro Itazuri <[email protected]>
firecracker-microvm · Feb 19, 2024 · 52984d4 · 52984d4
1 parent 7ae378a
commit 52984d4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tools/devctr/Dockerfile b/tools/devctr/Dockerfile
@@ -73,8 +73,8 @@ RUN cd /tmp/poetry && \
 RUN curl https://sh.rustup.rs -sSf | sh -s -- -y --default-toolchain "$RUST_TOOLCHAIN" \
     && rustup target add $ARCH-unknown-linux-musl \
     && rustup component add llvm-tools-preview \
-    && cargo install cargo-audit cargo-deny grcov cargo-sort \
-    && (if [ "$ARCH" = "x86_64" ]; then cargo install kani-verifier && cargo kani setup; else true; fi) \
+    && cargo install --locked cargo-audit cargo-deny grcov cargo-sort \
+    && (if [ "$ARCH" = "x86_64" ]; then cargo install --locked kani-verifier && cargo kani setup; else true; fi) \
     && rm -rf "$CARGO_HOME/registry" \
     && ln -s "$CARGO_REGISTRY_DIR" "$CARGO_HOME/registry" \
     && rm -rf "$CARGO_HOME/git" \