Holy shit. This formerly frustrated new #Rustacean was about to unleash a rant about how surprisingly difficult it is to protect your build env in this super safe language.
After all, cargo tries to force you to expose yourself to supply chain BS, like it's some kind of curl|sh on drugs.
I appear to be the only person in existence to ever have attempted this, but to force #cargo to use distro installed crates, apparently it suffices to create a `workspacedir/.cargo/config.toml` with the contents:
```
[source.crates-io]
directory = "/usr/share/cargo/registry"
```
Would be great if cargo had some kind of "--online" flag to override offline mode. This way you could run it offline by default and go online only if you so wish.
Next up is trying to find out how to harden rust-analyzer so I can look at files without it executing crate supplied code.
#Rust