Cédric Verstraeten and Copilot App
e3acd64a57
Align scratch runtime and releases with image hardening baseline
...
Move container HTTP to8080, remove capabilities/curl, preserve demo UI without mutating assets, patch vulnerable Go dependencies and document migration/runtime contracts. Gate releases on source/final-image security evidence and unresolved policy exceptions.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 22:03:04 +01:00
Cédric Verstraeten and Copilot App
9553b1b4b9
Assemble a media-compatible scratch runtime image
...
Build an explicit architecture-aware runtime filesystem from installed Debian package dependency manifests, preserving dynamic loaders, codecs and plugins, generated library alternatives/caches, trust data, non-root ownership and port binding. Keep shell/PTY and common runtime utilities while omitting package-management and privilege tools. Expand image smoke checks for H264/H265, font rendering, shell/PTY, package provenance, writable caches and existing startup/volume behavior.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 21:15:54 +01:00
Cédric Verstraeten and Copilot App
f6ce5e0846
Pin Go 1.26 toolchain and verified multi-platform image bases
...
Use Go 1.26.10 locally without automatic toolchain switching, verify downloaded modules, and build with read-only module metadata and trimmed source/VCS paths. Pin Go, Node, and Debian multi-platform manifests while retaining the compatible CGO/FFmpeg runtime and existing architecture selection. Align Go CI and document pin-refresh and ARMv6 limitations.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 20:53:40 +01:00
Cédric Verstraeten and Copilot App
024bb0abf9
Harden production Docker image and verify runtime permissions
...
Exclude local secrets and mutable data from image builds, restore Go checksum verification, remove runtime capability tooling and setuid/setgid permissions, and preserve non-root media and demo startup behavior. Add native image smoke checks and document runtime constraints.
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com >
2026-11-04 20:42:21 +01:00
Kilian
a80b375e89
Update README.md
2025-04-25 13:04:28 +02:00
Cédric Verstraeten
b2b8485b28
add networks
2024-07-24 12:35:09 +02:00
Kilian
c69d635431
Update docker-compose.yaml
...
Update example docker compose file
2024-07-05 15:50:30 +02:00
Cédric Verstraeten
472a40a5f6
add extra space to run command
2024-04-06 11:50:11 +02:00
Cédric Verstraeten
3f29d1c46f
fix wrong docker command
2024-01-30 20:47:13 +01:00
Cedric Verstraeten
c8c9a0fd6e
add kerberos factory
2022-12-12 21:05:59 +01:00
Cedric Verstraeten
9012bf2bf0
some more tweaks
2022-12-09 18:27:38 +01:00
Cedric Verstraeten
0fa1943701
add username and password env + add kubernetes deployment
2022-12-09 16:50:40 +01:00
Cedric Verstraeten
2b90bdbc0b
add documentation for docker compose
2022-12-08 13:01:03 +01:00
Cedric Verstraeten
cd4e9eed3d
add references to env. list!
2022-12-08 12:29:58 +01:00
Cedric Verstraeten
0658f9afbb
add example docker compose
2022-12-07 23:02:35 +01:00
Cedric Verstraeten
47fb5b81ab
intiialise deployment directory
2022-12-07 17:34:38 +01:00
