{"slug":"argocd","tag":"v3.5.5-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-argocd-v3.5.5-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"c018f32d2cca9359be706e3a712d24e61c9af3d5efec66cadaf12ba342ef4fc8","generated_at":"2026-10-29T19:31:15Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/argoproj/argo-cd.git","ref":"v3.5.5","commit":"a5038b0e2bbac1715754380ae0084df8e3d5b48c","url":"https://github.com/argoproj/argo-cd/tree/a5038b0e2bbac1715754380ae0084df8e3d5b48c"},"fetches":[{"kind":"git","url":"https://github.com/argoproj/argo-cd.git","ref":"v3.5.5"},{"kind":"git","url":"https://github.com/helm/helm.git","ref":"v4.2.4"},{"kind":"git","url":"https://github.com/kubernetes-sigs/kustomize.git","ref":"kustomize/v5.8.2"},{"kind":"git","url":"https://github.com/git-lfs/git-lfs.git","ref":"v3.7.1"},{"kind":"git","url":"https://github.com/k3s-io/k3s.git","ref":"v1.36.5+k3s1"}],"bases":[{"image":"golang:1.26.9-bookworm","digest":"sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c"},{"image":"ubuntu:24.04","digest":"sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.9-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c"]},"build_method":"source-rebuild-go","source_date_epoch":1791799473,"source_date_epoch_utc":"2026-10-12T10:04:33Z","target":{"image":"readystack/argocd:v3.5.5-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:a839c35b4f2f97e8cb783848232b6bf34e3373a3717c0397d028b0545d276248","config_digest":"sha256:f441c15c2baf0978d794173cecdb4ac4aebb845fe15d21add963a66e6ffacf27"},"checksummed_files":60673},"files":[{"path":"BASES.tsv","size":262,"sha256":"3c9efbccc840faed8679106690c0a3cfe9ecb6f59eef1bc996e41598d5fcb18c","public":"full","lines":2,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.9-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c\tbases/golang_1.26.9-bookworm_d9c68c2c5116.oci\nubuntu:24.04@sha256:68ee22004a9109b44973313b02ff7b1de250f1de0f5ecb628d73f579aaff33ac\tbases/ubuntu_24.04_68ee22004a91.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":8915536,"sha256":"561b305652c69e87e233213a09ca796e8db3492ddb9f4978bb0e3cb74e94c35b","public":"account","lines":60673},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":14016,"sha256":"a8a41d732b44415281b588d07c5d13286837b51b7c353e27e5bd45cdf8a31c55","public":"account","lines":184},{"path":"Dockerfile.offline","size":14016,"sha256":"a8a41d732b44415281b588d07c5d13286837b51b7c353e27e5bd45cdf8a31c55","public":"account","lines":184},{"path":"Dockerfile.offline.pinned","size":14016,"sha256":"a8a41d732b44415281b588d07c5d13286837b51b7c353e27e5bd45cdf8a31c55","public":"preview","lines":184,"preview":{"text":"# =====================================================================\n# Argo CD v3.5.5 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <git-context>\n# Pinned-public-base + vendored model (the container builder cannot see host images, so nothing here\n# FROMs a locally built image): golang 1.26.9 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/{argocd,helm,kustomize,gitlfs,k3s}-src are fully vendored Go trees (GOPROXY=off, -mod=vendor), all five\n# compiled here on the one pinned Go; vendored/debs is the apt closure, dpkg offline.\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE: one self-contained, NON-ROOT container (USER 999). supervisord runs k3s (--rootless\n# --disable-agent: the Kubernetes API that holds argocd's config/CRDs, no nodes, no pods), redis, and\n# argocd-repo-server / -application-controller / -server (--insecure on :8080) as plain processes.\n# k3s is its server binary (./cmd/server) built from source, not the release's self-extracting wrapper. Under\n# --disable-agent nothing from the wrapper's extracted userland runs: --rootless only relocates the data dir to\n# $HOME (k3s calls rootlesskit only when it also runs an agent), and no containerd/runc/CNI ever starts.\n# =====================================================================\nFROM golang:1.26.9-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c AS argocd-build\nWORKDIR /src\nCOPY vendored/argocd-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off\n# The ldflags upstream's Makefile stamps (argocd-all), with the values fixed to the v3.5.5 tag:\n# buildDate is the tag commit's committer date (SOURCE_DATE_EPOCH 1791799473), not the wall clock.\nRUN go build -trimpath -ldflags \"-s -w \\","lines_shown":24,"lines_total":184}},{"path":"Dockerfile.vendor","size":11745,"sha256":"900ad9cf14f0df97c761a464cba3c6e3de7b6b0ecb74afa3a1f1aec0f37e1068","public":"account","lines":164},{"path":"MANIFEST.txt","size":4789802,"sha256":"3968599590ca265b4b964646459f5ac89b7b743ceeab7cb03cde4e70a8e138dd","public":"account","lines":60675},{"path":"README.md","size":3273,"sha256":"778e1f5d4e130fed8dd1227b0f6d3d62eeb4444498214db91a2359029a0e3cd6","public":"account","lines":36},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"38b4a974d325a8d7dc7e6718c1256fda36d4c7c5de0d4c7ece682aa05430b731","public":"full","lines":1,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1791799473\n"},{"path":"TARGET_DIGEST.txt","size":281,"sha256":"0eb87a572863aaa3f4087fcb84bceab5090f1fb2b39560bf5a1b2c0ae3b8ab2f","public":"full","lines":6,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:a839c35b4f2f97e8cb783848232b6bf34e3373a3717c0397d028b0545d276248\nconfig_digest=sha256:f441c15c2baf0978d794173cecdb4ac4aebb845fe15d21add963a66e6ffacf27\ntag=readystack/argocd:v3.5.5-CE-ubuntu24.04-r1\nprobe_port=8080\nprobe_path=/healthz\nprobe_timeout=300\n"},{"path":"VERIFY_OFFLINE.sh","size":7000,"sha256":"520705cb939e05a308da29feea6f4f320ccd06f5bca6939b4195c0e27e15ff01","public":"account","lines":123},{"path":"bootstrap.sh","size":691,"sha256":"37c0f11e252514860c4583e8389eec5e20ea193f7040782e8a8612e1bc499332","public":"account","lines":13},{"path":"docs/PROVENANCE.md","size":1802,"sha256":"508773e2c65a86f117935b4f940606c21116021550b24e01deb9812373f2cd41","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5161,"sha256":"c44596d7e6d4dcf39e4a581eceb6665719dc69102b5619c8ba4280751d4f8464","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1981,"sha256":"93e8a307399eff757a3d563a7a6e0207ec3f753ce3f66e901924c5eaa635fe0b","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":71,"sha256":"fd8dfee6dac6393afa9d508b05595e244d1ce66dc6ffed9407f0eb90db603bfe","public":"full","lines":2,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for argocd (resolve at build_kit)\ngolang:1.26.9-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":1578,"sha256":"3d759c4eed7bf22d3f14c4eceb8a8d20dabe3b6eb12e35134aa1b0766cb8c79c","public":"account","lines":43},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":651,"sha256":"6dde67960cdff731a7e796833d408c12fa3a50bacdcca7c28a0002f7076aa2c9","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":350216,"sha256":"7ce0b7d21d2793dde5789e7508e13d8d3ed430b73b8cb48fb1aa5a6e37dd2cd5","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":309,"sha256":"f28ebddebc9d202bc1303eb33d310bb806c109b6fd4d9a9547dd666e346d5206","public":"full","lines":9,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"argocd\",\n  \"repo\": \"https://github.com/argoproj/argo-cd.git\",\n  \"ref\": \"v3.5.5\",\n  \"commit\": \"a5038b0e2bbac1715754380ae0084df8e3d5b48c\",\n  \"tree_listing_sha256\": \"226df7145403c00a8592611d6c6ad608ce9363292fcfed41f119bb5e97fc0f5a\",\n  \"file_count\": 5472\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":97,"sha256":"1d93608cf24a840552fcaa88d2cef0c13a75610dc896996108bd97a3c7062e80","public":"account","lines":11},{"path":"docs/provenance/TOOLCHAIN.lock","size":3687,"sha256":"9d340246b3b5fb558fe110b9891347ad413dea24f86e560a4103750ab5ed2015","public":"account","lines":95},{"path":"k3s-cli.sh","size":470,"sha256":"5e8c42e619c3e9924fb1cc508d4d6fbf8a2f30e4546624eff8fb8ace6d20370d","public":"account","lines":6},{"path":"rebuild.json","size":1434,"sha256":"a8ec7745fb6dff64c1d7825de57387289ed6d65d3c637233d7936bc1f5c47d02","public":"account","lines":38},{"path":"supervisord.conf","size":2694,"sha256":"29315be23cb13b055f2a295c04737f3440d5137442130120e2e717757f32bddb","public":"account","lines":60},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/argocd/v3.5.5-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":328813594},"docs":{"files":5508,"bytes":208628710},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":55122,"bytes":830396122}},"links":{"page":"https://readystack.dev/products/argocd/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fargocd%2Frecipe","kit":"https://readystack.dev/buy.html?product=argocd"}}