Update rust and libseccomp dependencies

rust-toolchain.toml

@@ -11,7 +11,7 @@
 # allowlisted using a toolchain that requires it, causing the A/B-test to
 # always fail.
 [toolchain]
-channel = "1.96.0"
+channel = "1.97.0"
 targets = ["x86_64-unknown-linux-musl", "aarch64-unknown-linux-musl"]
 profile = "minimal"
 

src/jailer/src/cgroup.rs

@@ -392,13 +392,13 @@ impl CgroupV2 {
         let parent = match path.as_ref().parent() {
             Some(p) => p,
             None => {
-                writeln_special(&cg_subtree_ctrl, format!("+{}", &controller))?;
+                writeln_special(&cg_subtree_ctrl, format!("+{}", controller))?;
                 return Ok(());
             }
         };
 
         Self::write_all_subtree_control(parent, controller)?;
-        writeln_special(&cg_subtree_ctrl, format!("+{}", &controller))
+        writeln_special(&cg_subtree_ctrl, format!("+{}", controller))
     }
 
     // Returns controllers that can be enabled from the cgroup path specified

src/jailer/src/main.rs

@@ -382,7 +382,7 @@ mod tests {
 
         let mut fds = Vec::new();
         for i in 0..n {
-            let maybe_file = File::create(format!("{}/{}", &tmp_dir_path, i));
+            let maybe_file = File::create(format!("{}/{}", tmp_dir_path, i));
             fds.push(maybe_file.unwrap().into_raw_fd());
         }
 

src/vmm/src/device_manager/mmio.rs

@@ -434,7 +434,7 @@ impl MMIODeviceManager {
     #[cfg(target_arch = "aarch64")]
     pub fn virtio_device_info(&self) -> Vec<&MMIODeviceInfo> {
         let mut device_info = Vec::new();
-        for (_, dev) in self.virtio_devices.iter() {
+        for dev in self.virtio_devices.values() {
             device_info.push(&dev.resources);
         }
         device_info

tests/integration_tests/security/test_sec_audit.py

@@ -54,6 +54,6 @@ def set_of_vulnerabilities(output: utils.CommandReturn):
     toml_file = FC_WORKSPACE_DIR / "Cargo.toml"
 
     git_ab_test_host_command_if_pr(
-        f"cargo deny --manifest-path {toml_file} -f json check advisories",
+        f"RUSTUP_LOG=warn cargo deny --manifest-path {toml_file} -f json check advisories",
         comparator=set_did_not_grow_comparator(set_of_vulnerabilities),
     )

tools/devctr/Dockerfile

@@ -71,7 +71,7 @@ RUN apt-get update \
 # Builder: static libseccomp (musl)
 # ============================================================
 FROM base-image AS libseccomp-builder
-ENV LIBSECCOMP_VER="v2.6.0"
+ENV LIBSECCOMP_VER="v2.6.1"
 
 # Install static version of libseccomp
 # We need to compile from source because
@@ -204,7 +204,7 @@ RUN cp /usr/lib/python3/dist-packages/seccomp.cpython-312-"$ARCH"-linux-gnu.so "
 # Base: Rust toolchain (current version)
 # ============================================================
 FROM python-deps AS rust-toolchain
-ARG RUST_TOOLCHAIN="1.96.0"
+ARG RUST_TOOLCHAIN="1.97.0"
 ENV CARGO_HOME=/usr/local/rust
 ENV RUSTUP_HOME=/usr/local/rust
 ENV PATH="$PATH:$CARGO_HOME/bin"

tools/devtool

@@ -68,7 +68,7 @@
 DEVCTR_IMAGE_NO_TAG="public.ecr.aws/firecracker/fcuvm"
 
 # Development container tag
-DEVCTR_IMAGE_TAG=${DEVCTR_IMAGE_TAG:-v91}
+DEVCTR_IMAGE_TAG=${DEVCTR_IMAGE_TAG:-v92}
 
 # Development container image (name:tag)
 # This should be updated whenever we upgrade the development container.