Binary packages are expected to include Cargo.lock in the repo so that the produced binaries match across different builds.
Tejun Heo