{"slug":"coredns","tag":"v1.14.2-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-coredns-v1.14.2-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"30f4cd47c170b3c3c6b868b188cbeacf639934b677b8ca4ba798ca3d5ac49912","generated_at":"2026-10-29T19:33:29Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/coredns/coredns","ref":"v1.14.2","commit":"dd1df4f5db93767a44e37638df44969503b320d2","url":"https://github.com/coredns/coredns/tree/dd1df4f5db93767a44e37638df44969503b320d2"},"fetches":[{"kind":"git","url":"https://github.com/coredns/coredns.git","ref":"v1.14.2"},{"kind":"http","url":"https://github.com/canonical/chisel/releases/download/v1.5.1/chisel_v1.5.1_linux_amd64.tar.gz"},{"kind":"http","url":"https://github.com/canonical/chisel-releases/archive/f2600d3aa90123db6d44bb1441a99afc8b5847d9.tar.gz"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1772772585,"source_date_epoch_utc":"2026-03-06T04:49:45Z","target":{"image":"readystack/coredns:v1.14.2-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:faf5d9691f306d7f318377a2db731aa843ef8ed23866e7c410cdbc001dda2c4b","config_digest":"sha256:4ad64d3f76e714057d267c146ab893eac110364c942d37a8eb7e5932adc0449c"},"checksummed_files":10207},"files":[{"path":"BASES.tsv","size":264,"sha256":"98233a2e2970f9c85252887b94bd7ed3933410509ec56d9007b0b25aea7aaa66","public":"full","lines":2,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852\tbases/ubuntu_24.04_fe81560990fa.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":1477852,"sha256":"0d7614bfd1d617bd059947e0c063e00ed0f803f80e552cba64f997ac44160d9b","public":"account","lines":10207},{"path":"Corefile","size":431,"sha256":"62dd601852c23d774f6ccdb84fdf4b355b4a93f0d78bdbb8457cc97af216d328","public":"account","lines":10},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":6260,"sha256":"b7bb681339fab1f266157c563603393d8946d0627fc8b29b82b00b775c54fbe8","public":"account","lines":83},{"path":"Dockerfile.offline","size":6260,"sha256":"b7bb681339fab1f266157c563603393d8946d0627fc8b29b82b00b775c54fbe8","public":"account","lines":83},{"path":"Dockerfile.offline.pinned","size":6260,"sha256":"b7bb681339fab1f266157c563603393d8946d0627fc8b29b82b00b775c54fbe8","public":"preview","lines":83,"preview":{"text":"# =====================================================================\n# CoreDNS v1.14.2 L-009 HERMETIC OFFLINE BUILD: the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max,version=v1 --attest type=sbom --push <directory context>\n# Pinned-public-base + vendored model: golang 1.26.10 and ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/coredns-src is the fully vendored Go tree (GOPROXY=off, -mod=vendor); vendored/chisel the chiselled Ubuntu\n# 24.04 runtime (gen_dockerfile.py's runtime_base cut); vendored/debs libcap2-bin for setcap in the rootfs stage only.\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE: upstream's image (coredns/coredns Dockerfile at v1.14.2: distroless static, /coredns with\n# `setcap cap_net_bind_service=+ep`, USER nonroot:nonroot = 65532, WORKDIR /, ENTRYPOINT [\"/coredns\"]) on a chiselled Ubuntu 24.04\n# runtime instead of distroless. The file capability lets the non-root user bind :53 under kubeadm v1.36.6's CoreDNS\n# Deployment (capabilities add NET_BIND_SERVICE, drop ALL; allowPrivilegeEscalation false; readOnlyRootFilesystem):\n# with no_new_privs a file capability is still honoured when the process already holds it in its permitted set, which\n# the runtime grants from the Pod's add list.\n# =====================================================================\n\n# --- CoreDNS v1.14.2 (Makefile: CGO off, coremain.GitCommit stamp; plugin.cfg's generated zplugin.go/zdirectives.go are\n#     committed at the tag) -------------------------------------------------------------------------------------------\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_coredns\nWORKDIR /coredns\nCOPY vendored/coredns-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off\nRUN mkdir -p /out && go build -trimpath -ldflags \"-s -w -X github.com/coredns/coredns/coremain.GitCommit=dd1df4f\" -o /out/coredns . && \\","lines_shown":24,"lines_total":83}},{"path":"Dockerfile.vendor","size":6337,"sha256":"ab7aab9055700f3c20b6d5d321c4b55f982fb8cd558393f5b31a98239a0aff10","public":"account","lines":58},{"path":"MANIFEST.txt","size":783806,"sha256":"78b382195a034e6d4f3ca45a393cc81ee3b2f7fecc1f7e3c4cce63697a66d189","public":"account","lines":10209},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"9898cad9e661b690c8305988c4eb4b2168eaef4cb3d2c136e186e1348ea1b8c4","public":"full","lines":1,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1772772585\n"},{"path":"TARGET_DIGEST.txt","size":282,"sha256":"6917021e0e14792342145deba16f9d26ed6ac504f57ece4b708f0a98e46747c1","public":"full","lines":6,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:faf5d9691f306d7f318377a2db731aa843ef8ed23866e7c410cdbc001dda2c4b\nconfig_digest=sha256:4ad64d3f76e714057d267c146ab893eac110364c942d37a8eb7e5932adc0449c\ntag=readystack/coredns:v1.14.2-CE-ubuntu24.04-r1\nprobe_port=8080\nprobe_path=/health\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1699,"sha256":"127bedc6cb93355bd7ba6d49dea828514bdb1f11a773a90cf9d08d8c4d40fd41","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5101,"sha256":"eb0d04ab9b006e27721bad6cdba47b0fc6b18b9d9e3e469d72f7b7f5405a1b35","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1967,"sha256":"27d4d0061001e6276bb652beb803d6d84e986ef2e801ed6ca5b0c5332d861504","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":73,"sha256":"660f9f9aac047b0b9395d94fff8116fdeceefbd10c7dcd6d9cc98b42d83e1805","public":"full","lines":2,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for coredns (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":1546,"sha256":"39ff2bc7aad1a53936c6725867a5bea46883451e9c54c4125087db7c715fcc3d","public":"account","lines":28},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":648,"sha256":"016f0a69772eae99a9b7d887203d4e49162b25bf6935a543d7d9570097121452","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":29977,"sha256":"84cc5f6a14622f1134933fd2866082605d289718e973b9bbc53e6bbe433090c2","public":"account","lines":924},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":305,"sha256":"aecfaa5c35596eb392bc625673c1b03ac84a7cf0cb2310932b2ff2951056be34","public":"full","lines":9,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"coredns\",\n  \"repo\": \"https://github.com/coredns/coredns\",\n  \"ref\": \"v1.14.2\",\n  \"commit\": \"dd1df4f5db93767a44e37638df44969503b320d2\",\n  \"tree_listing_sha256\": \"f69cbed3da6f6a1dbbddc86418a6aae8588c6ecf4c604208b9eba41225f42670\",\n  \"file_count\": 917\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":1,"sha256":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b","public":"account","lines":1},{"path":"docs/provenance/TOOLCHAIN.lock","size":3908,"sha256":"1d85a04430a28ec6b27745448c7e1ea72e07ce5e135580e747c036456394f222","public":"account","lines":100},{"path":"rebuild.json","size":1437,"sha256":"6e9b503389746c00d8a31336993c4c0c2ef6bee306ea01dc20d6ce74fd586ca9","public":"account","lines":38},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/coredns/v1.14.2-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":969,"bytes":3693543},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":9196,"bytes":102719877}},"links":{"page":"https://readystack.dev/products/coredns/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fcoredns%2Frecipe","kit":"https://readystack.dev/buy.html?product=coredns"}}