Cédric Verstraeten and Copilot App
e3acd64a57
Align scratch runtime and releases with image hardening baseline
...
Move container HTTP to8080, remove capabilities/curl, preserve demo UI without mutating assets, patch vulnerable Go dependencies and document migration/runtime contracts. Gate releases on source/final-image security evidence and unresolved policy exceptions.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 22:03:04 +01:00
Cédric Verstraeten and Copilot App
9553b1b4b9
Assemble a media-compatible scratch runtime image
...
Build an explicit architecture-aware runtime filesystem from installed Debian package dependency manifests, preserving dynamic loaders, codecs and plugins, generated library alternatives/caches, trust data, non-root ownership and port binding. Keep shell/PTY and common runtime utilities while omitting package-management and privilege tools. Expand image smoke checks for H264/H265, font rendering, shell/PTY, package provenance, writable caches and existing startup/volume behavior.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 21:15:54 +01:00
Cédric Verstraeten and Copilot App
f6ce5e0846
Pin Go 1.26 toolchain and verified multi-platform image bases
...
Use Go 1.26.10 locally without automatic toolchain switching, verify downloaded modules, and build with read-only module metadata and trimmed source/VCS paths. Pin Go, Node, and Debian multi-platform manifests while retaining the compatible CGO/FFmpeg runtime and existing architecture selection. Align Go CI and document pin-refresh and ARMv6 limitations.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 20:53:40 +01:00
Cédric Verstraeten and Copilot App
024bb0abf9
Harden production Docker image and verify runtime permissions
...
Exclude local secrets and mutable data from image builds, restore Go checksum verification, remove runtime capability tooling and setuid/setgid permissions, and preserve non-root media and demo startup behavior. Add native image smoke checks and document runtime constraints.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 20:42:21 +01:00
Kilian
a80b375e89
Update README.md
2025-04-25 13:04:28 +02:00
Cédric Verstraeten
213aaa5c15
update agent to 3.2.3
2024-09-14 19:34:19 +02:00
Cédric Verstraeten
b2b8485b28
add networks
2024-07-24 12:35:09 +02:00
Kilian
c69d635431
Update docker-compose.yaml
...
Update example docker compose file
2024-07-05 15:50:30 +02:00
Cédric Verstraeten
472a40a5f6
add extra space to run command
2024-04-06 11:50:11 +02:00
Cédric Verstraeten
3f29d1c46f
fix wrong docker command
2024-01-30 20:47:13 +01:00
Cedric Verstraeten
95b3623c04
change startup command (new flag method)
2024-01-03 12:19:18 +01:00
Cedric Verstraeten
5308376a67
add terraform deployment example
2023-07-04 21:04:16 +02:00
Cedric Verstraeten
2b112d29cf
further detail snap deployment
2023-07-01 11:52:13 +02:00
Cedric Verstraeten
20d2517e74
add snapcraft
2023-07-01 07:42:12 +02:00
Cedric Verstraeten
4b6c25bb85
documentation for balena apps
2023-06-25 23:25:42 +02:00
Cedric Verstraeten
729b38999e
add deploy with balena
2023-06-25 22:14:23 +02:00
Cedric Verstraeten
4cbf0323f1
Reference separate balena repositories
2023-06-25 20:21:44 +02:00
Cedric Verstraeten
1f5cb8ca88
merge directories
2023-06-25 20:05:03 +02:00
Cedric Verstraeten
8be0a04502
add balena deployment (app + block)
2023-06-25 20:03:37 +02:00
Cedric Verstraeten
756b893ecd
reference latest tags
2023-06-24 12:58:16 +02:00
Cedric Verstraeten
30d59f2613
add systemd details, move to seperate deployment page
2023-02-02 13:14:36 +01:00
Cedric Verstraeten
be0277432b
add documentation for static binary
2023-02-01 20:21:37 +01:00
Cedric Verstraeten
c8c9a0fd6e
add kerberos factory
2022-12-12 21:05:59 +01:00
Cedric Verstraeten
f6b95ce7f3
few more design tweaks
2022-12-12 20:47:26 +01:00
Cedric Verstraeten
6b31ddcbfc
complete kubernetes docs + added openshift
2022-12-12 20:43:27 +01:00
Cedric Verstraeten
73892ee86f
update kubernetes resource files
2022-12-09 20:53:41 +01:00
Cedric Verstraeten
9012bf2bf0
some more tweaks
2022-12-09 18:27:38 +01:00
Cedric Verstraeten
0fa1943701
add username and password env + add kubernetes deployment
2022-12-09 16:50:40 +01:00
Cedric Verstraeten
e33ee6cfa6
add introduction for Docker and Docker Compose in the deployment file
2022-12-08 15:58:52 +01:00
Cedric Verstraeten
2b90bdbc0b
add documentation for docker compose
2022-12-08 13:01:03 +01:00
Cedric Verstraeten
cd4e9eed3d
add references to env. list!
2022-12-08 12:29:58 +01:00
Cedric Verstraeten
0658f9afbb
add example docker compose
2022-12-07 23:02:35 +01:00
Cedric Verstraeten
47fb5b81ab
intiialise deployment directory
2022-12-07 17:34:38 +01:00
