{"slug":"cloudflared","tag":"2026.10.5-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-cloudflared-2026.10.5-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"91c10d8a57d3f6c6e3cf660fe6f15ea06706e45f416823b6c84286df8c581fba","generated_at":"2026-10-29T19:32:22Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/cloudflare/cloudflared","ref":"2026.10.5","commit":"99b2eb2c0152862af2b1abf7c7b4e2170a46b9fe","url":"https://github.com/cloudflare/cloudflared/tree/99b2eb2c0152862af2b1abf7c7b4e2170a46b9fe"},"fetches":[{"kind":"git","url":"https://github.com/cloudflare/cloudflared","ref":"2026.10.5"}],"bases":[{"image":"golang:1.27.3-bookworm","digest":"sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"]},"build_method":"source-rebuild-go","source_date_epoch":1793106340,"source_date_epoch_utc":"2026-10-27T13:05:40Z","target":{"image":"readystack/cloudflared:2026.10.5-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:7c25045344936c216eaaf0e41c22c009ab3307280049205a811640608b008770","config_digest":"sha256:0742f528097ca73ff0ffe28af0d2466b8fc7297ffcac5b7581858abc2a8622bb"},"checksummed_files":4141},"files":[{"path":"BASES.tsv","size":262,"sha256":"203db39d31165cdf0ef7de9050461c107d9b50e5f22ecc1739a0ecbc33f89b79","public":"full","lines":2,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5\tbases/golang_1.27.3-bookworm_972b4110ba0f.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":578713,"sha256":"4d4d12e8c44807f9396fbb2c3f0c70f7b180835e93608d47f5267f8b30df0184","public":"account","lines":4141},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":3422,"sha256":"c91026a7664839ada2244973128b0a62cc6b0ec8064531baa543a7879229d6dd","public":"account","lines":38},{"path":"Dockerfile.offline","size":3422,"sha256":"c91026a7664839ada2244973128b0a62cc6b0ec8064531baa543a7879229d6dd","public":"account","lines":38},{"path":"Dockerfile.offline.pinned","size":3422,"sha256":"c91026a7664839ada2244973128b0a62cc6b0ec8064531baa543a7879229d6dd","public":"preview","lines":38,"preview":{"text":"# GENERATED L-009 hermetic build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Go tree + debs from Dockerfile.vendor.\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS build_cloudflared\nWORKDIR /src\nCOPY vendored/cloudflared-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1793106340\nRUN go build -trimpath -ldflags='-X main.Version=2026.10.5 -X main.BuildTime=2026-10-26T09:34:58Z -X github.com/cloudflare/cloudflared/metrics.Runtime=virtual' -o /cloudflared ./cmd/cloudflared && /cloudflared --version > /tmp/cloudflared.version 2>&1; cat /tmp/cloudflared.version; grep -qF 'cloudflared version 2026.10.5 (built 2026-10-26T09:34:58Z)' /tmp/cloudflared.version || { echo 'cloudflared --version does not report cloudflared version 2026.10.5 (built 2026-10-26T09:34:58Z)'; exit 1; }\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\nENV DEBIAN_FRONTEND=noninteractive TUNNEL_METRICS=0.0.0.0:20241\nRUN --mount=type=bind,source=vendored/debs,target=/tmp/debs \\\n    set --; for f in /tmp/debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\\n    rm -rf /var/lib/apt/lists/* \\\n           /var/log/dpkg.log /var/log/alternatives.log /var/log/apt /var/cache/ldconfig/aux-cache /var/cache/fontconfig\nARG SOURCE_DATE_EPOCH=1793106340\nRUN groupadd -r -g 65532 cloudflared && useradd -r -u 65532 -g cloudflared -d /home/cloudflared -m cloudflared && \\\n    mkdir -p /home/cloudflared /etc/cloudflared && chown -R cloudflared:cloudflared /home/cloudflared /etc/cloudflared && \\\n    : \"${SOURCE_DATE_EPOCH:?SOURCE_DATE_EPOCH must be set for a reproducible build}\" && \\\n    sed -ri \"s/^([^:]*:[^:]*):[0-9]*:/\\1:$((SOURCE_DATE_EPOCH/86400)):/\" /etc/shadow && \\\n    rm -f /etc/passwd- /etc/shadow- /etc/group- /etc/gshadow-\nCOPY --from=build_cloudflared /cloudflared /usr/local/bin/cloudflared","lines_shown":24,"lines_total":38}},{"path":"Dockerfile.vendor","size":1651,"sha256":"21ba62922f75df934c9a86e9a21f4262ef4b78763a4da0647bd413e04e01ac02","public":"account","lines":20},{"path":"MANIFEST.txt","size":297155,"sha256":"c0221a9381a994a94ce382780866ecfbc86a1e1dc74ae92e513362e5cb309e6d","public":"account","lines":4143},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"bd3a9f1db2da9c505a4afc16f9f548c583f11aea56947b6076e0350e5944025e","public":"full","lines":1,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1793106340\n"},{"path":"TARGET_DIGEST.txt","size":554,"sha256":"58bf5666cce51c2fb7514aba8fc40f82fdea26e9138c314dea01fb16914e21a2","public":"full","lines":8,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:7c25045344936c216eaaf0e41c22c009ab3307280049205a811640608b008770\nconfig_digest=sha256:0742f528097ca73ff0ffe28af0d2466b8fc7297ffcac5b7581858abc2a8622bb\ntag=readystack/cloudflared:2026.10.5-CE-ubuntu24.04-r1\nprobe_port=20241\nprobe_path=/ready\nprobe_timeout=180\nverify_boot=skip\nverify_boot_reason=cloudflared connects out to Cloudflare's network: it starts only with your tunnel token (TUNNEL_TOKEN) and Internet access to Cloudflare, so the offline check cannot boot it; run it with your token as the admin handbook describes\n"},{"path":"VERIFY_OFFLINE.sh","size":8100,"sha256":"dc0b5cd5c104a5da5c3f4e379e8f3d2eeffa307c8545067925bb4317a722b0b7","public":"account","lines":138},{"path":"docs/PROVENANCE.md","size":1726,"sha256":"06ce5b23d0fe7054c02636d7bcf29f0195ac867ce06fc642abb89a85bc9d7f89","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5293,"sha256":"2d23cee43565ab1521b03ef685bb7a477b6eecb8c6cecdf0c3fce379292f800b","public":"account","lines":59},{"path":"docs/VERIFY.md","size":1997,"sha256":"cd59de4694b67adff1d58c2f2bde553137e9b5efdc76ac663ef8d9f5b449d24c","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":76,"sha256":"38951f88945d1be22b5d672eb8d5aba6c6357b9757129d17f74c8e6ca900cb28","public":"full","lines":2,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for cloudflared (resolve at build_kit)\ngolang:1.27.3-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":3426,"sha256":"7ab1ac06a43866b38a0567b15c6768934a2be8e5e2b78cffafe73752e3df9d3a","public":"account","lines":44},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":661,"sha256":"2ea24f5fbef727d0d4b223a1b7a7c747f73de6e1bf466fca9d5295e08c9fe9f6","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":16557,"sha256":"10ba763ab169af3ff322a9a9a853b3416efb368be31918803c66773ddfe504af","public":"account","lines":490},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":318,"sha256":"13d2887af1d3db19d632504517da909f08da412262667a1a8598e13f57c40df2","public":"full","lines":9,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"cloudflared\",\n  \"repo\": \"https://github.com/cloudflare/cloudflared\",\n  \"ref\": \"2026.10.5\",\n  \"commit\": \"99b2eb2c0152862af2b1abf7c7b4e2170a46b9fe\",\n  \"tree_listing_sha256\": \"d2f23560095aca2612ebe109bfefba516296e92bc701c112798db728e3cb4853\",\n  \"file_count\": 483\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":28,"sha256":"fa091140511e85f86057bf9f05d5bd9e073f13c04af3de77559c304bd4b38227","public":"account","lines":3},{"path":"docs/provenance/TOOLCHAIN.lock","size":2720,"sha256":"f78b3b6486b34bc7881b62c48fa129df144c5ee178ec56f9fc69d9214331da91","public":"account","lines":74},{"path":"rebuild.json","size":1618,"sha256":"855c59d0162c3d92ce03924db4a533cb2a6ee7350184aab062f0268d8d3968ad","public":"account","lines":36},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/cloudflared/2026.10.5-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":330381419},"docs":{"files":534,"bytes":5597024},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":3568,"bytes":34500435}},"links":{"page":"https://readystack.dev/products/cloudflared/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fcloudflared%2Frecipe","kit":"https://readystack.dev/buy.html?product=cloudflared"}}