Add new tool package_validator validates RUNPATHS

package_validator enforces that we do not produce
an DEB/RPM package with ELF files that cannot
resolve their own dependencies.

CMK-31459

Change-Id: I5b1cd1f5b793fb0f4c15cb78a27807e90d0a1ec3

Author: nigelgbanks

MODULE.bazel

@@ -728,6 +728,8 @@ include("//bazel/module:rust/site.MODULE.bazel")
 
 include("//bazel/module:rust/host.MODULE.bazel")
 
+include("//bazel/module:rust/tools.MODULE.bazel")
+
 include("//bazel/module:gazelle/go.MODULE.bazel")
 
 include("//bazel/module:js.MODULE.bazel")

bazel/module/rust/tools.MODULE.bazel

@@ -0,0 +1,17 @@
+# tools_crates is for developer tools and test utilities that run on the host.
+# Unlike site_crates and host_crates, each tool is its own standalone Cargo
+# workspace and uses its own Cargo.lock. tools_crates keeps a single Bazel
+# lockfile for all such tools.
+tools_crates = use_extension("@rules_rust//crate_universe:extensions.bzl", "crate")
+tools_crates.from_cargo(
+    name = "tools_crates",
+    cargo_lockfile = "//tests/packaging/package_validator:Cargo.lock",
+    lockfile = "//:tools.Cargo.lock.bazel",
+    manifests = ["//tests/packaging/package_validator:Cargo.toml"],
+    supported_platform_triples = ["x86_64-unknown-linux-gnu"],
+)
+use_repo(tools_crates, "tools_crates")
+tools_crates.splicing_config(
+    repositories = ["tools_crates"],
+    resolver_version = "2",
+)

tests/packaging/package_validator/BUILD.bazel

@@ -0,0 +1,59 @@
+load("@bazel_skylib//rules:build_test.bzl", "build_test")
+load("@rules_rust//rust:defs.bzl", "rust_binary", "rust_library", "rust_test")
+load("@tools_crates//:defs.bzl", "aliases", "all_crate_deps")
+
+rust_library(
+    name = "package_validator_lib",
+    srcs = glob(
+        ["src/**/*.rs"],
+        exclude = ["src/main.rs"],
+    ),
+    aliases = aliases(),
+    crate_name = "package_validator",
+    edition = "2021",
+    proc_macro_deps = all_crate_deps(proc_macro = True),
+    deps = all_crate_deps(),
+)
+
+rust_binary(
+    name = "package_validator",
+    srcs = [
+        "src/args.rs",
+        "src/main.rs",
+    ],
+    aliases = aliases(),
+    edition = "2021",
+    proc_macro_deps = all_crate_deps(proc_macro = True),
+    visibility = ["//visibility:public"],
+    deps = all_crate_deps() + [":package_validator_lib"],
+)
+
+rust_test(
+    name = "unit_tests",
+    size = "small",
+    aliases = aliases(),
+    crate = ":package_validator_lib",
+    data = glob(["fixtures/**"]),
+    proc_macro_deps = all_crate_deps(proc_macro = True),
+    deps = all_crate_deps() + ["@rules_rust//tools/runfiles"],
+)
+
+rust_test(
+    name = "integration_tests",
+    size = "small",
+    srcs = ["tests/integration_test.rs"],
+    aliases = aliases(),
+    crate_name = "integration_test",
+    data = glob(["fixtures/**"]),
+    edition = "2021",
+    proc_macro_deps = all_crate_deps(proc_macro = True),
+    deps = all_crate_deps() + [
+        ":package_validator_lib",
+        "@rules_rust//tools/runfiles",
+    ],
+)
+
+build_test(
+    name = "build_test",
+    targets = [":package_validator"],
+)