Add tool to diagnose issues with reference measurements

.cargo/xtask.toml

@@ -36,6 +36,7 @@ binary_allow_list = [
   "omicron-dev",
   "sled-agent",
   "sled-agent-sim",
+  "measurement-diagnose",
 ]
 
 # libnvme is a global zone only library and therefore we must be sure that only

Cargo.toml

@@ -40,6 +40,7 @@ members = [
     "dev-tools/downloader",
     "dev-tools/dropshot-apis",
     "dev-tools/ls-apis",
+    "dev-tools/measurement-diagnose",
     "dev-tools/mgs-dev",
     "dev-tools/omdb",
     "dev-tools/omicron-dev",
@@ -211,6 +212,7 @@ default-members = [
     "dev-tools/downloader",
     "dev-tools/dropshot-apis",
     "dev-tools/ls-apis",
+    "dev-tools/measurement-diagnose",
     "dev-tools/mgs-dev",
     "dev-tools/omdb",
     "dev-tools/omicron-dev",
@@ -396,7 +398,8 @@ assert_cmd = "2.0.17"
 async-bb8-diesel = "0.2"
 async-recursion = "1.1.1"
 async-trait = "0.1.89"
-attest-mock = { git = "https://github.com/oxidecomputer/dice-util", rev = "10952e8d9599b735b85d480af3560a11700e5b64" }
+attest-mock = { git = "https://github.com/oxidecomputer/dice-util", rev = "6e0ef48f72ff85ba50fc8286c8e89dc5f9c822dd" }
+attest-data = { git = "https://github.com/oxidecomputer/dice-util", rev = "6e0ef48f72ff85ba50fc8286c8e89dc5f9c822dd" }
 atomicwrites = "0.4.4"
 authz-macros = { path = "nexus/authz-macros" }
 backoff = { version = "0.4.0", features = [ "tokio" ] }
@@ -450,6 +453,7 @@ crucible-common = { git = "https://github.com/oxidecomputer/crucible", rev = "71
 csv = "1.3.1"
 curve25519-dalek = "4"
 daft = { version = "0.1.4", features = ["derive", "newtype-uuid1", "oxnet01", "uuid1"] }
+der = { version = "0.7.10", default-features = false }
 display-error-chain = "0.2.2"
 omicron-ddm-admin-client = { path = "clients/ddm-admin-client" }
 datatest-stable = "0.3.2"
@@ -458,6 +462,7 @@ debug-ignore = "1.0.5"
 derive_more = "0.99.20"
 derive-where = "1.5.0"
 dev-tools-common = { path = "dev-tools/common" }
+dice-verifier = { git = "https://github.com/oxidecomputer/dice-util", rev = "6e0ef48f72ff85ba50fc8286c8e89dc5f9c822dd", features = ["ipcc"] }
 # Having the i-implement-... feature here makes diesel go away from the workspace-hack
 diesel = { version = "2.2.12", features = ["i-implement-a-third-party-backend-and-opt-into-breaking-changes", "postgres", "r2d2", "chrono", "serde_json", "network-address", "uuid"] }
 diesel-dtrace = "0.4.2"

dev-tools/measurement-diagnose/Cargo.toml

@@ -0,0 +1,47 @@
+[package]
+name = "omicron-measurement-diagnose"
+version = "0.1.0"
+edition.workspace = true
+license = "MPL-2.0"
+
+[lints]
+workspace = true
+
+[build-dependencies]
+omicron-rpaths.workspace = true
+vergen-gitcl.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+async-trait.workspace = true
+attest-data.workspace = true
+camino.workspace = true
+clap.workspace = true
+dice-verifier.workspace = true
+der.workspace = true
+dropshot.workspace = true
+futures.workspace = true
+omicron-workspace-hack.workspace = true
+oxide-tokio-rt.workspace = true
+pem.workspace = true
+# See omicron-rpaths for more about the "pq-sys" dependency.
+pq-sys = "*"
+rats-corim.workspace = true
+reqwest.workspace = true
+serde.workspace = true
+serde_json.workspace = true
+sled-agent-client.workspace = true
+sled-agent-types.workspace = true
+slog.workspace = true
+slog-error-chain.workspace = true
+strum.workspace = true
+tokio = { workspace = true, features = ["full"] }
+tufaceous-artifact.workspace = true
+
+[dev-dependencies]
+
+# Disable doc builds by default for our binaries to work around issue
+# rust-lang/cargo#8373.  These docs would not be very useful anyway.
+[[bin]]
+name = "measurement-diagnose"
+doc = false