{"slug":"crowdsec","tag":"v1.8.1-CE-ubuntu24.04-r4","current":true,"account":false,"tarball":"ReadyStack-crowdsec-v1.8.1-CE-ubuntu24.04-r4.tar.gz","tarball_sha256":"33e1d304ad2396de2a333bdb778bf7682b98fc6583eff5cfe87c793c0538c372","generated_at":"2026-10-29T19:33:41Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/crowdsecurity/crowdsec","ref":"v1.8.1","commit":"909b5157986a2b2c2163300fdaef5ed01289f7d2","url":"https://github.com/crowdsecurity/crowdsec/tree/909b5157986a2b2c2163300fdaef5ed01289f7d2"},"fetches":[{"kind":"git","url":"https://github.com/crowdsecurity/crowdsec","ref":"v1.8.1"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1788424614,"source_date_epoch_utc":"2026-09-03T08:36:54Z","target":{"image":"readystack/crowdsec:v1.8.1-CE-ubuntu24.04-r4","image_manifest_digest":"sha256:b825053ddf5b8eafc4087450755603c96e86e8205f305248486c7a84019fb786","config_digest":"sha256:638dd70ad5d60a387db33d27282232fdcf90c73a458e516e3b54b539e4657432"},"checksummed_files":16760},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":2440254,"sha256":"f7632a69cdfe94720dd824a34136af79a8d2aa0971419f7c55d5009330a245c2","public":"account","lines":16760},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":4703,"sha256":"b245ffd29571e3b4dca98100ee0a05ebb03f1fba1d5befd2f28868bc63c9f9bd","public":"account","lines":50},{"path":"Dockerfile.offline","size":4703,"sha256":"b245ffd29571e3b4dca98100ee0a05ebb03f1fba1d5befd2f28868bc63c9f9bd","public":"account","lines":50},{"path":"Dockerfile.offline.pinned","size":4703,"sha256":"b245ffd29571e3b4dca98100ee0a05ebb03f1fba1d5befd2f28868bc63c9f9bd","public":"preview","lines":50,"preview":{"text":"# GENERATED L-009 hermetic build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Go tree + debs from Dockerfile.vendor.\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_crowdsec\nWORKDIR /src\nCOPY vendored/crowdsec-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1788424614\nRUN go build -trimpath -tags \"netgo osusergo expr_debug nomsgpack sqlite_modernc\" -ldflags='-s -w -X github.com/crowdsecurity/go-cs-lib/version.Version=v1.8.1 -X github.com/crowdsecurity/go-cs-lib/version.Tag=909b515 -X github.com/crowdsecurity/crowdsec/pkg/cwversion.Codename=alphaga -X github.com/crowdsecurity/crowdsec/pkg/csconfig.defaultConfigDir=/etc/crowdsec -X github.com/crowdsecurity/crowdsec/pkg/csconfig.defaultDataDir=/var/lib/crowdsec/data' -o /crowdsec ./cmd/crowdsec && /crowdsec -version\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_cscli\nWORKDIR /src\nCOPY vendored/crowdsec-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1788424614\nRUN go build -trimpath -tags \"netgo osusergo expr_debug nomsgpack sqlite_modernc\" -ldflags='-s -w -X github.com/crowdsecurity/go-cs-lib/version.Version=v1.8.1 -X github.com/crowdsecurity/go-cs-lib/version.Tag=909b515 -X github.com/crowdsecurity/crowdsec/pkg/cwversion.Codename=alphaga -X github.com/crowdsecurity/crowdsec/pkg/csconfig.defaultConfigDir=/etc/crowdsec -X github.com/crowdsecurity/crowdsec/pkg/csconfig.defaultDataDir=/var/lib/crowdsec/data' -o /cscli ./cmd/crowdsec-cli && /cscli version\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\nENV DEBIAN_FRONTEND=noninteractive\nRUN --mount=type=bind,source=vendored/debs,target=/tmp/debs \\\n    set --; for f in /tmp/debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\\n    rm -rf /var/lib/apt/lists/* \\\n           /var/log/dpkg.log /var/log/alternatives.log /var/log/apt /var/cache/ldconfig/aux-cache /var/cache/fontconfig\nARG SOURCE_DATE_EPOCH=1788424614\nRUN groupadd -r crowdsec && useradd -r -g crowdsec -d /var/lib/crowdsec -m crowdsec && \\","lines_shown":24,"lines_total":50}},{"path":"Dockerfile.vendor","size":1978,"sha256":"8e5168173b4402ec12c3ab2b01d12319eb7fb76218d1e6fb085e14706eea4d3f","public":"account","lines":23},{"path":"MANIFEST.txt","size":1300604,"sha256":"ec0a2c99b44e9800242f8ede7d9a5bfc3483c4d37a254cd6785cd6595156c552","public":"account","lines":16762},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"55fd7d6eb3ba81e5ec71695f1ec9c50851b758f7687a3459041d5332ce1aaf41","public":"full","lines":1,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/SOURCE_DATE_EPOCH.txt","text":"1788424614\n"},{"path":"TARGET_DIGEST.txt","size":282,"sha256":"3dcd690895565b98b32297d66caa5cfbfb6b6dce880537033be7da391da2a713","public":"full","lines":6,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:b825053ddf5b8eafc4087450755603c96e86e8205f305248486c7a84019fb786\nconfig_digest=sha256:638dd70ad5d60a387db33d27282232fdcf90c73a458e516e3b54b539e4657432\ntag=readystack/crowdsec:v1.8.1-CE-ubuntu24.04-r4\nprobe_port=8080\nprobe_path=/health\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":8100,"sha256":"dc0b5cd5c104a5da5c3f4e379e8f3d2eeffa307c8545067925bb4317a722b0b7","public":"account","lines":138},{"path":"acquis.yaml","size":447,"sha256":"503c9a6ef792e9b53e7426c5c7b53f2a6167a9490fefe05a04e2cecb68c5458f","public":"account","lines":14},{"path":"config.yaml","size":1319,"sha256":"5164ac2df453e753ff110ca99365739a773dc4b4ef625bbbf83cd579c7728f40","public":"account","lines":42},{"path":"docs/PROVENANCE.md","size":1706,"sha256":"8ef892c606212efd489f2a016f04d2ffec440f12ecd16883157acddd44c9c7ea","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5101,"sha256":"bcc9352bed2b314cef9143a4f5602dfabe3306295f0a4403da15a043fa604d43","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1964,"sha256":"b70f9cc741bea651e841423529f02b51a64230b8bb3c339d03640c4253a5a6c0","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":74,"sha256":"42f12f5ce24d212baf89082ca6118ba4500cb5e7e9bc7b3cb231344c8dd4e154","public":"full","lines":2,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for crowdsec (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":7409,"sha256":"9abc88538f42a600330ae39e453b74a835cd34f1c29ce0763524604282d909c5","public":"account","lines":78,"redactions":[{"line":14,"kind":"internal host"}],"kit_sha256":"2d700754ffddaafbedd6b45a60128e7b5eba44dee05cc97eabb8094a16616d58"},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":655,"sha256":"b5b25f5a1b857c68286af1521f2cc65a880fd9985dfca1b686df8557d113e38c","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":77619,"sha256":"67f643ffecf2162642d799ecb60a973524ab9545141728185f262d24b8cb1b8c","public":"account","lines":1708},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":313,"sha256":"42dcb9895191cc65931adf9e232b6f2a3e4f7e5a9b43be05c17060b45e83b588","public":"full","lines":9,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"crowdsec\",\n  \"repo\": \"https://github.com/crowdsecurity/crowdsec\",\n  \"ref\": \"v1.8.1\",\n  \"commit\": \"909b5157986a2b2c2163300fdaef5ed01289f7d2\",\n  \"tree_listing_sha256\": \"effc9c1e875306e64067a0f8fc08ee2bc1b4be3efa2d5ba1411d89c2dc8f9308\",\n  \"file_count\": 1701\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":28,"sha256":"fa091140511e85f86057bf9f05d5bd9e073f13c04af3de77559c304bd4b38227","public":"account","lines":3},{"path":"docs/provenance/TOOLCHAIN.lock","size":6142,"sha256":"42fa553a79b81d2efa12ff89b0e3b353a5df8da206450504826f18d4f2fef03d","public":"account","lines":149},{"path":"profiles.yaml","size":316,"sha256":"e42a18aa7d8f700267bfcf679316bdbb6d5aa461558c57bc5fd30f385d2f941b","public":"account","lines":15},{"path":"readystack-entrypoint.sh","size":1176,"sha256":"b519cc8ddd79d7cd795849c27e0f24b8dd60c9280602f8b1f64a9b6a1efa097d","public":"account","lines":18},{"path":"rebuild.json","size":1437,"sha256":"342073e7a0cf1f91fb630c60d90ef958d5aa079e914c3b3dc58bbc21267b3326","public":"account","lines":38},{"path":"simulation.yaml","size":18,"sha256":"3ed030a240ba63a6e770af3ece0e44e5eb6361f71426e701fec28eaadbeabbad","public":"account","lines":1},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/crowdsec/v1.8.1-CE-ubuntu24.04-r4/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":1754,"bytes":16938104},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":14962,"bytes":282302863}},"links":{"page":"https://readystack.dev/products/crowdsec/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fcrowdsec%2Frecipe","kit":"https://readystack.dev/buy.html?product=crowdsec"}}