novox/mesh-controller
6
0
Fork 0
Code Issues Pull Requests 8 Releases Wiki Activity

Merge pull request 'An archive may be an upstream release pinned by URL and sha256, mirrored by the build seat (hq issue 345, ADR 0316)' (#255) from fix/345-builder-archive-pins into main

Browse Source
This commit was merged in pull request #255.
This commit is contained in:
mesh-admin
2026-10-12 12:33:58 +00:00
parent db9e9c5b87 b0c4b849a7
commit 142a5ad71d
8 changed files with 947 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/mesh-builder/Dockerfile
+3 -2
View File
@@ -16,7 +16,8 @@ RUN CGO_ENABLED=0 go build -trimpath -ldflags '-s -w' -o /mesh-builder ./cmd/mes
FROM ${ALPINE_BASE}
# git to clone what it is asked to build, and the docker client to build and push it. The daemon
# is the machine's, reached through its socket — a build machine shares the runtime it was given
# rather than running one inside itself.
RUN apk add --no-cache git docker-cli
# rather than running one inside itself. xz to read an upstream release an archive is pinned to
# (novox/hq ADR 0316): Go's standard library reads gzip and bzip2 and not xz.
RUN apk add --no-cache git docker-cli xz
COPY --from=build /mesh-builder /usr/local/bin/mesh-builder
ENTRYPOINT ["/usr/local/bin/mesh-builder"]