Add parquet output using parquet2 via Rust

.gitignore

@@ -18,3 +18,6 @@ tulsigen-*
 compile_commands.json
 .cache/
 .vscode/*
+
+# Rust stuff
+target

Cargo.toml

@@ -0,0 +1,6 @@
+[workspace]
+members = [
+    # The below list must be kept in sync with the crates_repository.manifest
+    # key in the root WORKSPACE file.
+    "Source/santad/Logs/EndpointSecurity/ParquetLogger",
+]

Source/santad/Logs/EndpointSecurity/ParquetLogger/BUILD

@@ -0,0 +1,54 @@
+load("@crate_index//:defs.bzl", "aliases", "all_crate_deps")
+load("@rules_cc//cc:defs.bzl", "cc_binary", "cc_library")
+load("@rules_rust//rust:defs.bzl", "rust_static_library", "rust_test")
+load("//:helper.bzl", "rust_cxx_bridge", "santa_unit_test")
+
+rust_static_library(
+    name = "parquet_logger",
+    srcs = [
+        "column_builder.rs",
+        "cpp_api.rs",
+        "page_builder.rs",
+        "parquet_logger.rs",
+        "table.rs",
+        "value.rs",
+        "writer.rs",
+    ],
+    aliases = aliases(),
+    proc_macro_deps = all_crate_deps(
+        proc_macro = True,
+    ),
+    deps = all_crate_deps(
+        normal = True,
+    ),
+)
+
+cc_binary(
+    name = "write_test_file",
+    srcs = ["write_test_file.cc"],
+    deps = [":parquet_bridge"],
+)
+
+rust_test(
+    name = "parquet_logger_test",
+    crate = ":parquet_logger",
+)
+
+rust_cxx_bridge(
+    name = "parquet_bridge",
+    src = "cpp_api.rs",
+    deps = [":parquet_logger"],
+)
+
+cc_library(
+    name = "ParquetLogger",
+    srcs = ["ParquetLogger.cc"],
+    hdrs = ["ParquetLogger.h"],
+    deps = [":parquet_bridge"],
+)
+
+santa_unit_test(
+    name = "ParquetLoggerTest",
+    srcs = ["ParquetLoggerTest.mm"],
+    deps = [":ParquetLogger"],
+)

Source/santad/Logs/EndpointSecurity/ParquetLogger/Cargo.toml

@@ -0,0 +1,25 @@
+[package]
+name = "parquet_logger"
+version = "0.1.0"
+edition = "2021"
+description = "Parquet output support for Santa"
+
+[lib]
+name = "parquet_logger"
+path = "parquet_logger.rs"
+crate-type = ["cdylib", "staticlib"]
+
+[dependencies]
+parquet2 = "0.17.2"
+cxx = "1.0"
+
+# The release profile is tweaked for binary size. Not all of these options are
+# applied by bazel at the moment.
+[profile.release]
+# Automatically strip symbols from the binary. Note: this seems to have less of
+# an effect than just calling strip on the binary after the fact.
+strip = true  
+opt-level = "z"  # Optimize for size.
+lto = true
+codegen-units = 1  # Disable parallel codegen.
+panic = "abort" # This matches the behavior of LOG(FATAL).

Source/santad/Logs/EndpointSecurity/ParquetLogger/ParquetLogger.cc

@@ -0,0 +1,2 @@
+#include "ParquetLogger.h"
+