build(deps): use tpm2-tss version 4.1.3 instead of nightly

Signed-off-by: Takuma IMAMURA <209989118+hyperfinitism@users.noreply.github.com>

Author: hyperfinitism

.github/actions/install-tpm2-tss/action.yml

@@ -1,4 +1,11 @@
 name: Install tpm2-tss latest
+description: "Install tpm2-tss from source"
+
+inputs:
+  version:
+    description: "The version (tag, branch or commit SHA) of tpm2-tss to install"
+    required: false
+    default: "4.1.3"
 
 runs:
   using: "composite"
@@ -16,7 +23,7 @@ runs:
       run: |
         git clone --depth 1 https://github.com/tpm2-software/tpm2-tss
         cd tpm2-tss
-        git tag "4.1.999" # Fake version
+        git checkout ${{ inputs.version }}
         ./bootstrap
         ./configure --prefix=/usr \
           --disable-fapi --disable-weakcrypto --disable-integration

.github/workflows/build.yml

@@ -50,11 +50,8 @@ jobs:
           toolchain: ${{ matrix.toolchain }}
           target: ${{ matrix.target }}
       - uses: ./.github/actions/install-tpm2-tss
+        with:
+          version: "30e6057722058cb85c292dcb7b77760ad6410d4e" # version 4.1.3
       # - run: sudo apt-get update && sudo apt-get install -y libtss2-dev pkg-config
       - name: Build
-        env:
-          TSS2_ESYS_STATIC: 1
-          TSS2_SYS_STATIC: 1
-          TSS2_MU_STATIC: 1
-          TSS2_TCTILDR_STATIC: 1
         run: cargo build --workspace --all-targets --all-features --target ${{ matrix.target }}

.github/workflows/lint.yml

@@ -44,5 +44,7 @@ jobs:
           toolchain: stable
           components: clippy
       - uses: ./.github/actions/install-tpm2-tss
+        with:
+          version: "30e6057722058cb85c292dcb7b77760ad6410d4e" # version 4.1.3
       # - run: sudo apt-get update && sudo apt-get install -y libtss2-dev pkg-config
       - run: cargo clippy --workspace --all-targets --all-features -- -D warnings

.github/workflows/test.yml

@@ -55,13 +55,10 @@ jobs:
           toolchain: ${{ matrix.toolchain }}
           target: ${{ matrix.target }}
       - uses: ./.github/actions/install-tpm2-tss
+        with:
+          version: "30e6057722058cb85c292dcb7b77760ad6410d4e" # version 4.1.3
       # - run: sudo apt-get update && sudo apt-get install -y libtss2-dev pkg-config
       - name: Install swtpm
         run: sudo apt-get install -y swtpm
       - name: Run cargo test --all-targets
-        env:
-          TSS2_ESYS_STATIC: 1
-          TSS2_SYS_STATIC: 1
-          TSS2_MU_STATIC: 1
-          TSS2_TCTILDR_STATIC: 1
         run: cargo test --all-targets

README.md

@@ -22,13 +22,13 @@ curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
 source "$HOME/.cargo/env"
 ```
 
-`rust-tpm2-cli` targets the unreleased nightly version [tpm2-tss](https://github.com/tpm2-software/tpm2-tss), which includes significant updates beyond the 4.1.3 release (e.g. Unix domain socket support for the swtpm TCTI).
-To build `tpm2-tss` from source:
+`rust-tpm2-cli` targets [tpm2-tss](https://github.com/tpm2-software/tpm2-tss) v4.1.3 or later.
+
+```sh
+sudo apt install -y libtss2-dev pkg-config
+```
 
-> [!WARNING]
-> The steps below install a locally-built nightly snapshot under `/usr` with a **fake version tag** (`4.1.999`).
-> This may conflict with a distro-packaged `tpm2-tss` or with future upstream releases, as a package manager may refuse to downgrade from the fake version `4.1.999` to an official but lower version number (e.g., v4.1.4).
-> Once an official release with these features is available in your distribution's packages, you can simply install `tpm2-tss` by running `sudo apt install -y libtss2-dev`.
+To build `tpm2-tss` from source:
 
 ```bash
 # Install build dependencies
@@ -41,7 +41,7 @@ sudo apt install -y \
 # Clone latest main and build
 git clone --depth 1 https://github.com/tpm2-software/tpm2-tss
 cd tpm2-tss
-git tag "4.1.999" # Fake version
+git checkout 30e6057722058cb85c292dcb7b77760ad6410d4e   # tag: 4.1.3
 ./bootstrap
 ./configure --prefix=/usr \
     --disable-fapi --disable-weakcrypto --disable-integration
@@ -57,7 +57,7 @@ See also [Installation instructions for tpm2-tss](https://github.com/tpm2-softwa
 ```bash
 git clone https://github.com/hyperfinitism/rust-tpm2-cli
 cd rust-tpm2-cli
-TSS2_ESYS_STATIC=1 TSS2_SYS_STATIC=1 TSS2_MU_STATIC=1 TSS2_TCTILDR_STATIC=1 cargo build --release
+cargo build --release
 # => ./target/release/tpm2
 ```