mitmproxy-linux 0.11.2__tar.gz

mitmproxy_linux-0.11.2/.cargo/config.toml

@@ -0,0 +1,14 @@
+[env]
+WINDIVERT_PATH = { value = "mitmproxy-windows/mitmproxy_windows/", relative = true }
+
+[target.x86_64-apple-darwin]
+rustflags = [
+  "-C", "link-arg=-undefined",
+  "-C", "link-arg=dynamic_lookup",
+]
+
+[target.aarch64-apple-darwin]
+rustflags = [
+  "-C", "link-arg=-undefined",
+  "-C", "link-arg=dynamic_lookup",
+]

mitmproxy_linux-0.11.2/.github/FUNDING.yml

@@ -0,0 +1 @@
+github: [decathorpe, mhils]

mitmproxy_linux-0.11.2/.github/actions/setup/action.yml

@@ -0,0 +1,26 @@
+name: 'setup'
+description: 'checkout, setup rust and python'
+inputs:
+  rust-version:
+    description: 'Rust version'
+    required: true
+    default: 'stable'
+  extra-targets:
+    description: 'Extra Rust targets'
+  toolchain-args:
+    description: 'Extra args for `rustup toolchain`'
+runs:
+  using: "composite"
+  steps:
+    - uses: mhils/workflows/setup-python@v12  # PyO3 wants recent Python on Windows.
+    - run: rustup toolchain install ${{ inputs.rust-version }} --profile minimal ${{ inputs.toolchain-args }}
+      shell: bash
+    - run: rustup default ${{ inputs.rust-version }}
+      shell: bash
+    - if: inputs.extra-targets
+      run: rustup target add ${{ inputs.extra-targets }}
+      shell: bash
+    - uses: mhils/workflows/rust-cache@v14
+    - if: runner.os == 'Linux'
+      run: cargo install --locked bpf-linker
+      shell: bash

mitmproxy_linux-0.11.2/.github/dependabot.yml

@@ -0,0 +1,18 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      dependencies:
+        patterns:
+          - "*"
+  - package-ecosystem: cargo
+    directory: "/"
+    schedule:
+      interval: "monthly"
+    groups:
+      dependencies:
+        patterns:
+          - "*"

mitmproxy_linux-0.11.2/.github/python-version.txt

@@ -0,0 +1 @@
+3.12

mitmproxy_linux-0.11.2/.github/scripts/build-macos-redirector.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+
+set -eou pipefail
+
+if [ -n "${APPLE_ID-}" ]; then
+  echo "Signing keys available, building signed binary..."
+
+  APPLE_TEAM_ID=S8XHQB96PW
+
+  # Install provisioning profiles
+  mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles
+  echo -n "$APPLE_PROVISIONING_PROFILE_APP" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/app.provisionprofile
+  echo -n "$APPLE_PROVISIONING_PROFILE_EXT" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/ext.provisionprofile
+
+  # Create temporary keychain
+  KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain
+  security create-keychain -p "app-signing" $KEYCHAIN_PATH
+  security set-keychain-settings -lut 21600 $KEYCHAIN_PATH
+  security unlock-keychain -p "app-signing" $KEYCHAIN_PATH
+  # Import certificate to keychain
+  security import <(echo -n "$APPLE_CERTIFICATE") -A -k $KEYCHAIN_PATH
+  security list-keychain -s $KEYCHAIN_PATH
+
+  mkdir build
+  xcodebuild \
+    -scheme macos-redirector \
+    -archivePath build/macos-redirector.xcarchive \
+    OTHER_CODE_SIGN_FLAGS="--keychain $KEYCHAIN_PATH" \
+    archive
+  xcodebuild \
+    -exportArchive \
+    -archivePath build/macos-redirector.xcarchive \
+    -exportOptionsPlist ./ExportOptions.plist \
+    -exportPath ./build
+
+  # Notarize
+  # https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow
+  xcrun notarytool store-credentials "AC_PASSWORD" \
+    --keychain "$KEYCHAIN_PATH" \
+    --apple-id "$APPLE_ID" \
+    --team-id "$APPLE_TEAM_ID" \
+    --password "$APPLE_APP_PASSWORD"
+  ditto -c -k --keepParent "./build/Mitmproxy Redirector.app" "./build/Mitmproxy Redirector.zip"
+  xcrun notarytool submit \
+    "./build/Mitmproxy Redirector.zip" \
+    --keychain "$KEYCHAIN_PATH" \
+    --keychain-profile "AC_PASSWORD" \
+    --wait
+  xcrun stapler staple "./build/Mitmproxy Redirector.app"
+
+  mkdir -p dist
+  tar --create --file "./dist/Mitmproxy Redirector.app.tar" --cd "./build" "Mitmproxy Redirector.app"
+else
+  echo "Signing keys not available, building unsigned binary..."
+  xcodebuild -scheme macos-redirector CODE_SIGNING_ALLOWED="NO" build
+  mkdir -p dist
+  touch "dist/Mitmproxy Redirector.app.tar"
+fi

mitmproxy_linux-0.11.2/.github/scripts/pin-versions.py

@@ -0,0 +1,17 @@
+#!/usr/bin/env python3
+
+import tomllib
+from pathlib import Path
+
+with open("Cargo.toml", "rb") as f:
+    version = tomllib.load(f)["workspace"]["package"]["version"]
+
+pyproject_toml = Path("mitmproxy-rs/pyproject.toml")
+contents = pyproject_toml.read_text()
+contents = (
+    contents
+    .replace(f"mitmproxy_windows", f"mitmproxy_windows=={version}")
+    .replace(f"mitmproxy_linux", f"mitmproxy_linux=={version}")
+    .replace(f"mitmproxy_macos", f"mitmproxy_macos=={version}")
+)
+pyproject_toml.write_text(contents)

mitmproxy_linux-0.11.2/.github/scripts/release

@@ -0,0 +1,27 @@
+#!/usr/bin/env -S python3 -u
+import logging
+
+from releasetool import branch
+from releasetool import get_next_dev_version
+from releasetool import git_commit
+from releasetool import git_push
+from releasetool import git_tag
+from releasetool import status_check
+from releasetool import update_changelog
+from releasetool import update_rust_version
+
+logger = logging.getLogger(__name__)
+
+if __name__ == "__main__":
+    status_check()
+    update_changelog()
+    update_rust_version()
+    git_commit()
+    git_tag()
+
+    if branch == "main":
+        update_rust_version(version=get_next_dev_version())
+        git_commit(message="reopen main for development")
+
+    git_push()
+    logger.info("✅ All done. 🥳")

mitmproxy_linux-0.11.2/.github/workflows/autofix.yml

@@ -0,0 +1,53 @@
+name: autofix.ci
+
+on:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  MSRV: "1.80"  # Minimum Supported Rust Version
+
+jobs:
+  protobuf:
+    runs-on: macos-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - run: brew install swift-protobuf
+      - run: cargo install protoc-gen-prost
+      - run: protoc --proto_path=./src/ipc/ mitmproxy_ipc.proto
+          --prost_out=./src/ipc/
+          --prost_opt="bytes=data"
+          --swift_out=./mitmproxy-macos/redirector/ipc
+      - run: cargo fmt --all
+      - uses: autofix-ci/action@ff86a557419858bb967097bfc916833f5647fa8c
+
+  rustfmt:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: windows-latest
+          - os: macos-latest
+          - os: ubuntu-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+        with:
+          rust-version: ${{ env.MSRV }}
+          toolchain-args: --component rustfmt --component clippy
+
+        # We could run clippy on mitmproxy-linux-ebpf with
+        #   cargo +nightly clippy --workspace -- -C panic=abort -Zpanic_abort_tests
+        # but that means we'd use nightly clippy, which may change its behavior (and thus break CI).
+        # So we rather exempt mitmproxy-linux-ebpf from clippy lints.
+      - run: cargo clippy --fix --allow-dirty --workspace --exclude mitmproxy-linux-ebpf
+      - run: cargo fmt --all
+      - run: git checkout src/ipc/mitmproxy_ipc.rs
+
+      - uses: autofix-ci/action@ff86a557419858bb967097bfc916833f5647fa8c

mitmproxy_linux-0.11.2/.github/workflows/ci.yml

@@ -0,0 +1,244 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - 'v[0-9]+.[0-9]+.[0-9]+'
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  test:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      matrix:
+        include:
+          - os: windows-latest
+            rust: "1.80"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: macos-latest
+            rust: "1.80"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-22.04
+            rust: "1.80"  # MSRV - can't use variables here.
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-latest
+            rust: stable
+            args: --exclude mitmproxy-linux-ebpf
+          - os: ubuntu-latest  # old Ubuntu to test eBPF verifier compatibility
+            rust: nightly
+            args: --package mitmproxy-linux-ebpf
+    env:
+      RUSTFLAGS: ${{ matrix.rust == 'nightly' && '-Zpanic_abort_tests -C panic=abort' || '' }}
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+        with:
+          rust-version: ${{ matrix.rust }}
+
+      - name: Run "cargo check"
+        # the action-rs/cargo action adds inline annotations for "cargo check" output
+        uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72
+        with:
+          toolchain: ${{ matrix.rust }}
+          command: check
+          args: --workspace --verbose ${{ matrix.args }}
+      - if: matrix.rust != 'nightly'  # XXX: weird errors here
+        name: Run "cargo test"
+        # the action-rs/cargo action adds inline annotations for "cargo test" output
+        uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72
+        with:
+          toolchain: ${{ matrix.rust }}
+          command: test
+          args: --workspace --verbose ${{ matrix.args }}
+      - if: matrix.os == 'ubuntu-22.04'  # Test that eBPF loads
+        run: cargo test --features root-tests
+        working-directory: mitmproxy-linux
+        env:
+          CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_RUNNER: sudo -E
+
+  build:
+    strategy:
+      matrix:
+        include:
+          - name: windows-x86_64
+            os: windows-latest
+          - name: linux-x86_64
+            os: ubuntu-latest
+            args: --compatibility manylinux2014 --zig --sdist
+          - name: linux-arm64
+            os: ubuntu-latest
+            target: aarch64-unknown-linux-gnu
+            args: --compatibility manylinux2014 --zig --target aarch64-unknown-linux-gnu -i 3.12
+          - name: macos-universal
+            os: macos-latest
+            target: aarch64-apple-darwin x86_64-apple-darwin
+            args: --target universal2-apple-darwin
+    runs-on: ${{ matrix.os }}
+    name: build mitmproxy-rs (${{ matrix.name }})
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+        with:
+          extra-targets: ${{ matrix.target }}
+
+      - if: runner.os == 'Linux'
+        name: Install maturin[zig] from PyPI
+        uses: install-pinned/maturin-with-zig@68c027568b7d08df7bc3c52476ae28d1d2d787f5
+      - if: runner.os != 'Linux'
+        name: Install maturin from PyPI
+        uses: install-pinned/maturin@b1e3f698dbd19f284d4363cb361f75b2fa04679c
+
+      - if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+        run: python .github/scripts/pin-versions.py
+
+      - run: maturin build --release ${{ matrix.args }}
+        working-directory: ./mitmproxy-rs
+
+      # ensure that sdist is building.
+      # We do this here instead of a separate job because we don't want to wait for the entire matrix.
+      - if: contains(matrix.args, 'sdist')
+        run: pip install --no-dependencies target/wheels/*.tar.gz
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.name }}
+          path: target/wheels
+
+  build-macos-app:
+    runs-on: macos-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: actions/cache@v4
+        id: cache-app
+        with:
+          path: mitmproxy-macos/redirector/dist/
+          key: macos-${{ hashFiles('mitmproxy-macos/redirector/**', '.github/scripts/build-macos-redirector.sh') }}
+      - if: steps.cache-app.outputs.cache-hit != 'true' || hashFiles('mitmproxy-macos/redirector/dist/Mitmproxy Redirector.app.tar') == ''
+        run: $GITHUB_WORKSPACE/.github/scripts/build-macos-redirector.sh
+        working-directory: mitmproxy-macos/redirector
+        env:
+          APPLE_ID: ${{ secrets.APPLE_ID }}
+          APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }}
+          APPLE_PROVISIONING_PROFILE_APP: ${{ secrets.APPLE_PROVISIONING_PROFILE_APP }}
+          APPLE_PROVISIONING_PROFILE_EXT: ${{ secrets.APPLE_PROVISIONING_PROFILE_EXT }}
+          APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: macos-app
+          path: mitmproxy-macos/redirector/dist/
+
+  build-windows-wheel:
+    runs-on: windows-latest
+    name: build mitmproxy-windows
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+      - uses: install-pinned/build@aa7fb973fec4a5593736c5dc25b322120ca41a98
+
+      - run: cargo build --release --package windows-redirector
+
+      - run: python -m build --wheel ./mitmproxy-windows --outdir target/wheels/
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-os-windows
+          path: target/wheels
+
+  build-macos-wheel:
+    name: build mitmproxy-macos
+    needs: build-macos-app
+    runs-on: macos-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+        with:
+          extra-targets: aarch64-apple-darwin x86_64-apple-darwin
+      - uses: install-pinned/build@aa7fb973fec4a5593736c5dc25b322120ca41a98
+
+      - run: |
+          cargo build --release --package macos-certificate-truster --target x86_64-apple-darwin
+          cargo build --release --package macos-certificate-truster --target aarch64-apple-darwin
+          lipo -create -output target/release/macos-certificate-truster target/x86_64-apple-darwin/release/macos-certificate-truster target/aarch64-apple-darwin/release/macos-certificate-truster
+      - uses: actions/download-artifact@v4
+        with:
+          name: macos-app
+          path: mitmproxy-macos/redirector/dist/
+
+      - run: python -m build --wheel ./mitmproxy-macos --outdir target/wheels/
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-os-macos
+          path: target/wheels
+
+  build-linux-wheel:
+    name: build mitmproxy-${{ matrix.name }}
+    strategy:
+      matrix:
+        include:
+          - name: linux-x86_64
+            args: --compatibility manylinux2014 --zig --sdist
+          - name: linux-arm64
+            target: aarch64-unknown-linux-gnu
+            args: --compatibility manylinux2014 --zig --target aarch64-unknown-linux-gnu -i 3.12
+    runs-on: ubuntu-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+        with:
+          extra-targets: ${{ matrix.target }}
+      - name: Install maturin[zig] from PyPI
+        uses: install-pinned/maturin-with-zig@68c027568b7d08df7bc3c52476ae28d1d2d787f5
+
+      - run: maturin build --release ${{ matrix.args }}
+        working-directory: ./mitmproxy-linux
+
+      - uses: actions/upload-artifact@v4
+        with:
+          name: wheels-os-${{ matrix.name }}
+          path: target/wheels
+
+  test-linux-wheel-sdist:
+    needs: build-linux-wheel
+    runs-on: ubuntu-latest
+    steps:
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+      - uses: actions/download-artifact@v4
+        with:
+          name: wheels-os-linux-x86_64
+          path: target/wheels
+      - run: pip install --no-dependencies target/wheels/*.tar.gz
+
+  check:
+    if: always()
+    needs:
+      - test
+      - test-linux-wheel-sdist
+      - build
+      - build-windows-wheel
+      - build-linux-wheel
+      - build-macos-wheel
+    uses: mhils/workflows/.github/workflows/alls-green.yml@main
+    with:
+      jobs: ${{ toJSON(needs) }}
+
+  deploy:
+    uses: mhils/workflows/.github/workflows/python-deploy.yml@v13
+    needs: check
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags')
+    with:
+      artifact-pattern: wheels-*
+      artifact-merge-multiple: true
+      # repository: testpypi
+      # environment: deploy-testpypi
+    secrets:
+      password: ${{ secrets.PYPI_TOKEN }}

mitmproxy_linux-0.11.2/.github/workflows/docs.yml

@@ -0,0 +1,55 @@
+name: docs
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+# security: restrict permissions for CI jobs.
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # Build the documentation and upload the static HTML files as an artifact.
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      # TODO: This should ideally just reuse the main CI artifacts.
+      - uses: mhils/workflows/checkout@v12
+      - uses: ./.github/actions/setup
+      - uses: install-pinned/maturin-with-zig@68c027568b7d08df7bc3c52476ae28d1d2d787f5
+      - uses: install-pinned/mypy@2b552bed479e3f7065314667b670f7303619e989
+      - uses: install-pinned/pdoc@fd9469ecb06f32b7012e07e449ce98b217bf1189
+
+      - run: maturin build --features docs,pyo3/extension-module
+        working-directory: ./mitmproxy-rs
+      - run: pip install --no-index --no-dependencies --find-links target/wheels/ mitmproxy_rs
+
+      - run: stubtest --allowlist mitmproxy-rs/stubtest-allowlist.txt --mypy-config-file mitmproxy-rs/pyproject.toml mitmproxy_rs
+
+      - run: pdoc -o docs/ mitmproxy_rs
+
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: docs/
+
+  # Deploy the artifact to GitHub pages.
+  # This is a separate job so that only actions/deploy-pages has the necessary permissions.
+  deploy:
+    if: github.ref == 'refs/heads/main'
+    needs: build
+    runs-on: ubuntu-latest
+    permissions:
+      pages: write
+      id-token: write
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@v4

mitmproxy_linux-0.11.2/.github/workflows/release.yml

@@ -0,0 +1,30 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version (major.minor.patch)'
+        required: true
+        type: string
+      skip-branch-status-check:
+        description: 'Skip CI status check.'
+        default: false
+        required: false
+        type: boolean
+
+permissions: {}
+
+jobs:
+  release:
+    environment: deploy
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        token: ${{ secrets.GH_PUSH_TOKEN }}  # this token works to push to the protected main branch.
+    - uses: mhils/releasetool@v1
+    - run: ./.github/scripts/release
+      env:
+        PROJECT_VERSION: ${{ inputs.version }}
+        STATUS_CHECK_SKIP_GIT: ${{ inputs.skip-branch-status-check }}

mitmproxy_linux-0.11.2/.gitignore

@@ -0,0 +1,10 @@
+/.idea/
+/dist/
+/out/
+/target/
+/venv/
+/docs/
+__pycache__/
+*.xcuserstate
+editable.marker
+*.DS_Store