chore(secure-storage): set up cargo deb config for TA/CA (#866)

TheButlah · web-flow · commit b980d46f624e · 2025-12-11T11:07:07.000-05:00
Just the config files, not any CI / scripting.
diff --git a/optee/secure-storage/README.md b/optee/secure-storage/README.md
@@ -1,11 +1,13 @@
 # orb-optee-secure-storage
 
-A Rust implementation of an OP-TEE secure storage CLI. It implements a way to
+A Rust implementation of an OP-TEE secure storage API. It implements a way to
 easily read/write to a persistent, encrypted binary file that is addressed by a
 string key. Secure storage is ultimately backed by the jetson-fuse-derived
 [secure storage key](SSK), so this binary does *not* interact with the secure element
 at all - it merely requires /usr/persistent/tee to not be corrupted.
 
+It is accessible via either CLI or as a crate.
+
 ## Motivation
 
 Good security practices dictate that access to CAs should be as narrow/limited as possible.
diff --git a/optee/secure-storage/ca/Cargo.toml b/optee/secure-storage/ca/Cargo.toml
@@ -1,6 +1,10 @@
 [package]
 name = "orb-secure-storage-ca"
 version = "0.0.0"
+description = "CLI to talk to the orb-secure-storage TA"
+authors = ["Ryan Butler <thebutlah@users.noreply.github.com>"]
+publish = false
+
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
@@ -26,3 +30,6 @@ unsupported_targets = [
 	"x86_64-apple-darwin",
 	"x86_64-unknown-linux-gnu",
 ]
+
+[package.metadata.deb]
+assets = [["target/release/orb-secure-storage-ca", "/usr/local/bin/", "755"]]
diff --git a/optee/secure-storage/ta/Cargo.toml b/optee/secure-storage/ta/Cargo.toml
@@ -1,6 +1,10 @@
 [package]
 name = "orb-secure-storage-ta"
 version = "0.0.0"
+authors = ["Ryan Butler <thebutlah@users.noreply.github.com>"]
+description = "orb-secure-storage TA"
+publish = false
+
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
@@ -21,3 +25,6 @@ orb-secure-storage-proto.path = "../proto"
 
 [package.metadata.orb-optee]
 uuid_path = "../uuid.txt"
+
+[package.metadata.deb]
+assets = [["target/release/*.ta", "/usr/lib/optee_armtz/", "540"]]
