cargo 离线构建报 no matching package named xxx found？先查 source replacement 的段落名写成了 sources 还是 source

error: no matching package named `secure-token` found
location searched: registry `crates-io`
required by package `gateway-lite v0.1.0 (/srv/app)`

cargo fetch 退出码 = 101

[sources.crates-io]                # ← 注意这里是复数 sources
replace-with = "inner-mirror"

[registries.inner-mirror]
index = "sparse+http://10.10.20.31:9000/index/"
registries.inner-mirror.config = { file-dir = "/srv/mirror" }

# 起环境（builder 有网、builder-offline 真无外网）
docker compose up -d --build
docker compose exec builder bash

# 复现
/srv/ops/repro.sh
# -> error: no matching package named `secure-token` found, 退出码 101

# 问题态自检基线
/srv/ops/verify.sh
# -> PASS=7 FAIL=5 / RESULT: BAD

# 实验 A：复数 sources —— 失败
cat > .cargo/config.toml <<'CFG'
[sources.crates-io]
replace-with = "inner-mirror"
[source.inner-mirror]
directory = "/srv/vendor"
CFG
cargo fetch --offline      # -> error: no matching package named `secure-token` found, RC=101

# 实验 B：单数 source —— 成功
cat > .cargo/config.toml <<'CFG'
[source.crates-io]
replace-with = "inner-mirror"
[source.inner-mirror]
directory = "/srv/vendor"
CFG
cargo fetch --offline      # -> Locking 2 packages to latest compatible versions, RC=0

tar -xzf secure-token-1.0.3.crate -C /srv/vendor
cd /srv/vendor/secure-token-1.0.3
printf '{"files":{"Cargo.toml":"%s","src/lib.rs":"%s"},"package":null}\n' \
  "$(sha256sum Cargo.toml | awk '{print $1}')" \
  "$(sha256sum src/lib.rs  | awk '{print $1}')" > .cargo-checksum.json

error: failed to select a version for the requirement `secure-token = "^1.0.4"`
candidate versions found which didn't match: 1.0.4-patched.1, 1.0.3, 1.0.2, ...
if you are looking for the prerelease package it needs to be specified explicitly

MIRROR=/srv/vendor-mirror
VENDOR=/srv/vendor
APP=/srv/app

# 1) 归一化改号包：1.0.4-patched.1 -> 1.0.4
work=$(mktemp -d)
tar -xzf "$MIRROR/secure-token-1.0.4-patched.1.crate" -C "$work"
sed -i 's/^version = "1\.0\.4-patched\.1"/version = "1.0.4"/' \
    "$work/secure-token-1.0.4-patched.1/Cargo.toml"
mv "$work/secure-token-1.0.4-patched.1" "$work/secure-token-1.0.4"
( cd "$work" && tar -czf "$MIRROR/secure-token-1.0.4.crate" secure-token-1.0.4 )
rm -rf "$work" "$MIRROR/secure-token-1.0.4-patched.1.crate"

# 2) 展开为 directory source，并生成 .cargo-checksum.json
rm -rf "$VENDOR"; mkdir -p "$VENDOR"
for f in "$MIRROR"/secure-token-*.crate; do tar -xzf "$f" -C "$VENDOR"; done
for d in "$VENDOR"/*/; do
  d=${d%/}
  printf '{"files":{"Cargo.toml":"%s","src/lib.rs":"%s"},"package":null}\n' \
    "$(sha256sum "$d/Cargo.toml" | awk '{print $1}')" \
    "$(sha256sum "$d/src/lib.rs"  | awk '{print $1}')" > "$d/.cargo-checksum.json"
done

# 3) 修正段落名：必须是单数 [source.crates-io] / [source.inner-mirror]
cat > "$APP/.cargo/config.toml" <<'CFG'
[source.crates-io]
replace-with = "inner-mirror"

[source.inner-mirror]
directory = "/srv/vendor"
CFG

# 4) 生成并保留 Cargo.lock，钉住声明版本
cd "$APP"
want=$(awk -F'"' '/^secure-token/{print $2; exit}' Cargo.toml)
cp Cargo.toml /tmp/bak
sed -i "s/^secure-token = \"${want}\"/secure-token = \"=${want}\"/" Cargo.toml
cargo fetch --offline          # 生成 lock
cp /tmp/bak Cargo.toml         # 改回原声明
cargo fetch --offline          # lock 稳定停在 1.0.3

# 问题态
/srv/ops/verify.sh      -> PASS=7  FAIL=5  / RESULT: BAD

# 修复态
/srv/ops/repro.sh       -> cargo fetch 退出码 = 0 / RESULT: OK
/srv/ops/verify.sh      -> PASS=12 FAIL=0  / RESULT: OK
python3 /srv/client/check_build.py
    # declared_version = 1.0.3
    # cargo_fetch_rc   = 0
    # lock_version     = 1.0.3
    # cargo_build_rc   = 0
    # RESULT: OK

# 真的编译 + 运行
/srv/app/target/debug/gateway-lite
    # token=st.gateway-lite|read:config|0.21556a7dcc17a26c

# 真·无外网容器（network_mode: none）
docker compose run --rm builder-offline bash -c '/srv/ops/fix.sh >/dev/null && /srv/ops/verify.sh'
    # PASS=12 FAIL=0 / RESULT: OK