Build system post-merge fixes

- Get Cargo workflow to work again
- Remove unused LICENSE allow in deny.toml (tool would report error otherwise)
- Fix permissioning in "On Main Push" top-level workflow
- Fix argument expansion in ci_tests.sh

.github/workflows/cargo.yml

@@ -11,64 +11,37 @@ jobs:
     if: github.ref == 'refs/heads/main'
     steps:
       - uses: actions/checkout@v4
-      - uses: actions-rs/toolchain@v1
-        with:
-          profile: minimal
-          toolchain: stable
-          override: true
+      - uses: dtolnay/rust-toolchain@stable
       - name: stage
         run: bash ffi/rust/firedancer-sys/stage.sh
-      - uses: actions-rs/cargo@v1
-        with:
-          command: package
-          args: --allow-dirty --manifest-path ffi/rust/firedancer-sys/Cargo.toml
+      - run: cargo package --allow-dirty --manifest-path ffi/rust/firedancer-sys/Cargo.toml
 
   test:
     name: cargo-test
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions-rs/toolchain@v1
-        with:
-          profile: minimal
-          toolchain: stable
-          override: true
-      - uses: actions-rs/cargo@v1
-        with:
-          command: test
-          args: --all
+      - uses: dtolnay/rust-toolchain@stable
+      - run: cargo test --all
+        working-directory: ffi/rust
 
   fmt:
     name: cargo-rustfmt
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions-rs/toolchain@v1
-        with:
-          profile: minimal
-          toolchain: nightly
-          override: true
-          components: rustfmt, clippy
-      - uses: actions-rs/cargo@v1
-        with:
-          command: fmt
-          args: --all -- --check
+      - uses: dtolnay/rust-toolchain@stable
+      - run: cargo fmt --all -- --check
+        working-directory: ffi/rust
 
   clippy:
     name: cargo-clippy
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - uses: actions-rs/toolchain@v1
-        with:
-          profile: minimal
-          toolchain: nightly
-          override: true
-          components: rustfmt, clippy
-      - uses: actions-rs/cargo@v1
-        with:
-          command: clippy
-          args: --all -- -D warnings
+      - uses: dtolnay/rust-toolchain@stable
+      - run: cargo clippy --all -- -D warnings
+        working-directory: ffi/rust
 
   cargo-deny:
     name: cargo-deny
@@ -77,4 +50,4 @@ jobs:
     - uses: actions/checkout@v4
     - uses: EmbarkStudios/cargo-deny-action@v1
       with:
-        command: check bans licenses sources
+        command: --manifest-path ffi/rust/Cargo.toml check bans licenses sources

.github/workflows/on_main_push.yml

@@ -6,6 +6,10 @@ jobs:
   book:
     uses: ./.github/workflows/book.yml
     secrets: inherit
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
 
   clusterfuzz:
     uses: ./.github/workflows/clusterfuzz.yml

contrib/test/ci_tests.sh

@@ -26,7 +26,7 @@ set -x
 
 # Build and run tests for all machines
 OBJDIRS=( )
-for MACHINE in "${MACHINES[*]}"; do
+for MACHINE in ${MACHINES[*]}; do
   # TODO hacky
   OBJDIR="build/$(echo "$MACHINE" | tr "_" "/")"
   OBJDIRS+=( "${OBJDIR}" )

ffi/rust/deny.toml

@@ -5,13 +5,9 @@ unused-allowed-license = "deny"
 allow = [
     "MIT",
     "Apache-2.0",
-    "BSD-2-Clause",
     "BSD-3-Clause",
-    "0BSD",
     "ISC",
     "Unicode-DFS-2016",
-    "MPL-2.0",
-    "OpenSSL",
 ]
 
 [[licenses.clarify]]