diff --git a/Cargo.toml b/Cargo.toml
index 07aa5f93..8dcbbd75 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -14,3 +14,4 @@ members = [
     "packages/libkcapi",
     "packages/shim",
 ]
+exclude = ["sources"]
diff --git a/Makefile b/Makefile
index db74ad8e..7862c68a 100644
--- a/Makefile
+++ b/Makefile
@@ -19,8 +19,6 @@ else
 endif
 
 
-export GO_MODULES = ecs-gpu-init host-ctr
-
 all: build
 
 prep:
diff --git a/sources/Cargo.lock b/sources/Cargo.lock
new file mode 100644
index 00000000..4be6f6a6
--- /dev/null
+++ b/sources/Cargo.lock
@@ -0,0 +1,7 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 3
+
+[[package]]
+name = "empty-lib"
+version = "0.1.0"
diff --git a/sources/Cargo.toml b/sources/Cargo.toml
new file mode 100644
index 00000000..067bdc91
--- /dev/null
+++ b/sources/Cargo.toml
@@ -0,0 +1,6 @@
+[package]
+name = "empty-lib"
+version = "0.1.0"
+publish = false
+edition = "2021"
+license = "Apache-2.0 OR MIT"
diff --git a/sources/README.md b/sources/README.md
new file mode 100644
index 00000000..d5735ee6
--- /dev/null
+++ b/sources/README.md
@@ -0,0 +1,2 @@
+This is a temporary workaround for twoliter who currently expects a sources
+directory to exist in order for the docker volume mounts to work in buildkit
diff --git a/sources/deny.toml b/sources/deny.toml
new file mode 100644
index 00000000..456bccd9
--- /dev/null
+++ b/sources/deny.toml
@@ -0,0 +1,59 @@
+[licenses]
+version = 2
+
+# We want really high confidence when inferring licenses from text
+confidence-threshold = 0.93
+
+# Commented license types are allowed but not currently used
+allow = [
+    "Apache-2.0",
+    # "BSD-2-Clause",
+    "BSD-3-Clause",
+    "BSL-1.0",
+    # "CC0-1.0",
+    "ISC",
+    "MIT",
+    "OpenSSL",
+    "Unlicense",
+    "Zlib",
+    "MPL-2.0",
+]
+
+exceptions = [
+
+]
+
+[bans]
+# Deny multiple versions or wildcard dependencies.
+multiple-versions = "deny"
+wildcards = "deny"
+
+deny = []
+
+skip = [
+
+]
+
+skip-tree = [
+
+]
+
+[bans.workspace-dependencies]
+duplicates = "deny"
+include-path-dependencies = true
+unused = "deny"
+
+[advisories]
+# generational-arena is currently unmaintained.
+ignore = [
+    "RUSTSEC-2024-0014",
+]
+
+[sources]
+# Deny crates from unknown registries or git repositories.
+unknown-registry = "deny"
+unknown-git = "deny"
+
+allow-git = [
+
+]
diff --git a/sources/src/lib.rs b/sources/src/lib.rs
new file mode 100644
index 00000000..8b137891
--- /dev/null
+++ b/sources/src/lib.rs
@@ -0,0 +1 @@
+