{"slug":"airflow","tag":"3.3.2-CE-ubuntu24.04-r5","current":true,"account":false,"tarball":"ReadyStack-airflow-3.3.2-CE-ubuntu24.04-r5.tar.gz","tarball_sha256":"b9fbf5f414577866b701c0a10ffc77a298db2880a51c46458b049d53e5bfd372","generated_at":"2026-10-29T19:30:50Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/apache/airflow","ref":"3.3.2","commit":"aa19d2dbb9ed187ec01957a92848d9b005e9ba9d","url":"https://github.com/apache/airflow/tree/aa19d2dbb9ed187ec01957a92848d9b005e9ba9d"},"fetches":[{"kind":"git","url":"https://github.com/apache/airflow","ref":"3.3.2"},{"kind":"http","url":"https://www.python.org/ftp/python/3.12.15/Python-3.12.15.tar.xz"},{"kind":"http","url":"https://raw.githubusercontent.com/apache/airflow/constraints-3.3.2/constraints-3.12.txt"}],"bases":[{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"]},"build_method":"source-rebuild-python","source_date_epoch":1789292163,"source_date_epoch_utc":"2026-09-13T09:36:03Z","target":{"image":"readystack/airflow:3.3.2-CE-ubuntu24.04-r5","image_manifest_digest":"sha256:b411b52e4e7e0ecb4e5912aa466778e923c79257ad31af1b641d90b9a81b59e2","config_digest":"sha256:9daf14e7d71e904f2b0f58b792d3cbbad84f4b156876a0dbc005d689da4e1bc2"},"checksummed_files":26686},"files":[{"path":"BASES.tsv","size":121,"sha256":"0da49a3ea98fcaa345080b1a4230d2c798b395f71854063c2af657eb53a8a2e0","public":"full","lines":1,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/BASES.tsv","text":"ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":4069326,"sha256":"98d69488b1a689908c98296053f56300da94d341da196c5ad00902457808fcc5","public":"account","lines":26686},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":7533,"sha256":"1381970d43b9e4f4cc6eaa25e7b3c98fab6c5c64df9fef8b11a4077fe650973f","public":"account","lines":70},{"path":"Dockerfile.offline","size":7533,"sha256":"1381970d43b9e4f4cc6eaa25e7b3c98fab6c5c64df9fef8b11a4077fe650973f","public":"account","lines":70},{"path":"Dockerfile.offline.pinned","size":7533,"sha256":"1381970d43b9e4f4cc6eaa25e7b3c98fab6c5c64df9fef8b11a4077fe650973f","public":"preview","lines":70,"preview":{"text":"# GENERATED L-009 hermetic Python build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned base from BASE_IMAGE_DIGESTS.lock; vendored wheelhouse + source + debs from Dockerfile.vendor.\n# pydeps sub-stage installs the wheelhouse offline; COPY /deps /usr/local keeps pip OUT of the runtime SBOM.\n# CPython 3.12.15 COMPILED HERE, offline, from python.org's tarball (sha256 re-checked) and the vendored\n# build debs, by the same command the vendor stage ran; linked against Ubuntu's libraries (debs the scan\n# sees, apt fixes). The runtime takes /usr/local from this stage and none of the toolchain.\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c AS cpython\nARG SOURCE_DATE_EPOCH=1789292163\nENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}\nCOPY vendored/python/debs/ /tmp/cpython-debs/\nCOPY vendored/python/Python-3.12.15.tar.xz /tmp/Python-3.12.15.tar.xz\nRUN set --; for f in /tmp/cpython-debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\\n    : \"${SOURCE_DATE_EPOCH:?the CPython build needs SOURCE_DATE_EPOCH}\" && \\\n    echo \"c2c4321961fab0fb999d66e0cecf521c2ab3994c7992873ea99e306c1094fd5a  /tmp/Python-3.12.15.tar.xz\" | sha256sum -c - && \\\n    mkdir -p /usr/src/python && tar -xJf /tmp/Python-3.12.15.tar.xz -C /usr/src/python --strip-components=1 --no-same-owner && \\\n    rm -rf /tmp/cpython-debs /tmp/Python-3.12.15.tar.xz && cd /usr/src/python && \\\n    export DEB_BUILD_MAINT_OPTIONS=optimize=-lto && \\\n    PYCF=\"$(dpkg-buildflags --get CFLAGS) $(dpkg-buildflags --get CPPFLAGS)\" && PYLD=\"$(dpkg-buildflags --get LDFLAGS)\" && \\\n    ./configure --build=x86_64-linux-gnu --prefix=/usr/local --enable-shared --enable-loadable-sqlite-extensions --enable-option-checking=fatal --disable-test-modules --without-static-libpython --with-ensurepip=install --with-system-expat --without-system-libmpdec --with-dbmliborder= py_cv_module__dbm=n/a py_cv_module__gdbm=n/a py_cv_module__tkinter=n/a && \\\n    make -j\"$(nproc)\" \"EXTRA_CFLAGS=$PYCF\" \"LDFLAGS=$PYLD,--strip-all\" && \\","lines_shown":24,"lines_total":70}},{"path":"Dockerfile.vendor","size":8302,"sha256":"9a351a0e7c3a77b6a78034c72b8a78aecf2851da05b297379f6293023461f8f3","public":"account","lines":74},{"path":"MANIFEST.txt","size":2254708,"sha256":"25c255bd31d490a842370cf2f2c0535a62293a2ab6fdceeb853c1f2953069341","public":"account","lines":26688},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"196755a5465f4f997e9f6451c5c27d7af6877fca47f3a5f4c8e54646c43cc884","public":"full","lines":1,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/SOURCE_DATE_EPOCH.txt","text":"1789292163\n"},{"path":"TARGET_DIGEST.txt","size":295,"sha256":"d39b6b853856230bcef07def3023bdb289ea848de22020fe0cd602e1a71c56e4","public":"full","lines":6,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:b411b52e4e7e0ecb4e5912aa466778e923c79257ad31af1b641d90b9a81b59e2\nconfig_digest=sha256:9daf14e7d71e904f2b0f58b792d3cbbad84f4b156876a0dbc005d689da4e1bc2\ntag=readystack/airflow:3.3.2-CE-ubuntu24.04-r5\nprobe_port=8080\nprobe_path=/api/v2/monitor/health\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":8100,"sha256":"dc0b5cd5c104a5da5c3f4e379e8f3d2eeffa307c8545067925bb4317a722b0b7","public":"account","lines":138},{"path":"docs/PROVENANCE.md","size":2009,"sha256":"1b363d670e881521a20bdda7b2982b084ca84d454025d61c46deb06e475d9219","public":"account","lines":29},{"path":"docs/REBUILD.md","size":5132,"sha256":"f28afee72e6cd80a011ce297bc27502b641b1c31bee2d35cd860d4430d8319e3","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1960,"sha256":"7ab90d75f94b4f73e5335de32a9042b6668e82d3984c81f7b4a2bae2b5b42bba","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":50,"sha256":"59c0829271e8892c344b6c6b52f91f0ee90aab076e452b03b67cfee2e99cda09","public":"full","lines":2,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for airflow (resolve at build_kit)\n\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":4672,"sha256":"9030ec628e20a52fcbb0c30e0d484786780d39c2cfe4cd158670b399c916e1fe","public":"account","lines":42},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":645,"sha256":"76f0d738d84f3d664e6e090e71508d1ea60cf958743202cec281986f71a1da53","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":322490,"sha256":"e885b118baee09a191be4906ad4b9478c2ddf41b20ecbe2f969a32464fed16eb","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":304,"sha256":"a50c66f6bcb11b128badb06879025777b19c58eaceca356ea16d55a5c7bc28fb","public":"full","lines":9,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"airflow\",\n  \"repo\": \"https://github.com/apache/airflow\",\n  \"ref\": \"3.3.2\",\n  \"commit\": \"aa19d2dbb9ed187ec01957a92848d9b005e9ba9d\",\n  \"tree_listing_sha256\": \"0c2bedc616cb31218619d06cfbcf76165852c90952c130e097f5b92ef6924e6c\",\n  \"file_count\": 13190\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":36,"sha256":"3342957f888a3afbbfff7bd26dd4cead6662104fe30152ea75497941150c81dd","public":"account","lines":4},{"path":"docs/provenance/TOOLCHAIN.lock","size":2916,"sha256":"bccb79e7867ab76dd43b8c0b415d4e764968c29a7534764e8d1248a7392ec820","public":"account","lines":71},{"path":"rebuild.json","size":1169,"sha256":"ea4ea0027056d3377d324a52120e7f235a0d64059eacbedc6cfd19c951014dc3","public":"account","lines":33},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/airflow/3.3.2-CE-ubuntu24.04-r5/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":5,"bytes":29771169},"docs":{"files":13238,"bytes":181170042},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":13420,"bytes":356871407}},"links":{"page":"https://readystack.dev/products/airflow/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fairflow%2Frecipe","kit":"https://readystack.dev/buy.html?product=airflow"}}