{"slug":"docuseal","tag":"3.3.3-CE-alpine-r3","current":true,"account":false,"tarball":"ReadyStack-docuseal-3.3.3-CE-alpine-r3.tar.gz","tarball_sha256":"b30b956345c35fbbe455f23b9f5f1144c8e98feb22bb5784889e5911eef82d32","generated_at":"2026-10-29T19:34:21Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/docusealco/docuseal","ref":"3.3.3","commit":"8f8f69f0bc6ac2e59746cd6efac54a852289bec3","url":"https://github.com/docusealco/docuseal/tree/8f8f69f0bc6ac2e59746cd6efac54a852289bec3"},"fetches":[{"kind":"git","url":"https://github.com/docusealco/docuseal","ref":"3.3.3"},{"kind":"http","url":"https://github.com/satbyy/go-noto-universal/releases/download/v7.0/GoNotoKurrent-Regular.ttf"},{"kind":"http","url":"https://github.com/satbyy/go-noto-universal/releases/download/v7.0/GoNotoKurrent-Bold.ttf"},{"kind":"http","url":"https://github.com/impallari/DancingScript/raw/master/fonts/DancingScript-Regular.otf"},{"kind":"http","url":"https://raw.githubusercontent.com/impallari/DancingScript/master/OFL.txt"},{"kind":"http","url":"https://raw.githubusercontent.com/notofonts/noto-fonts/refs/heads/main/LICENSE"},{"kind":"http","url":"https://github.com/docusealco/fields-detection/releases/download/2.0.0/model_704_int8.onnx"},{"kind":"http","url":"https://dl-cdn.alpinelinux.org/alpine/edge/main"}],"bases":[{"image":"ruby:4.0.5-alpine","digest":"sha256:f48938e9ae72a4d32e728b03c306e7a7ff21f0cb6c2ed33f44a078c700b2aea6"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0"},"build_method":"source-rebuild-ruby","source_date_epoch":1792411032,"source_date_epoch_utc":"2026-10-19T11:57:12Z","target":{"image":"readystack/docuseal:3.3.3-CE-alpine-r3","image_manifest_digest":"sha256:170e4c988261fc9c066f02094fb0060885450920ba28aa8f78ad7cd81d257c5a","config_digest":"sha256:11344a9835a7ab69a554ed81eb51ff0d661fc1c97b6520b56369fd232fa1b880"},"checksummed_files":1230},"files":[{"path":"BASES.tsv","size":131,"sha256":"f08ad8cb7d9096706f2ded4ca7ffeb62b87b8e7dc65b780e988bd7aa0b742b97","public":"full","lines":1,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/BASES.tsv","text":"ruby:4.0.5-alpine@sha256:f48938e9ae72a4d32e728b03c306e7a7ff21f0cb6c2ed33f44a078c700b2aea6\tbases/ruby_4.0.5-alpine_f48938e9ae72.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":169336,"sha256":"2bc16f6c476a69b14630eea4fd89194b269c592c57525d7b416b36ff1314b086","public":"account","lines":1230},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":5523,"sha256":"ec5efdb4c5a9b3d96bdfb3fb3ffa68d182f451e6cae2756b2f03c05b382bb913","public":"account","lines":74},{"path":"Dockerfile.offline","size":5523,"sha256":"ec5efdb4c5a9b3d96bdfb3fb3ffa68d182f451e6cae2756b2f03c05b382bb913","public":"account","lines":74},{"path":"Dockerfile.offline.pinned","size":5523,"sha256":"ec5efdb4c5a9b3d96bdfb3fb3ffa68d182f451e6cae2756b2f03c05b382bb913","public":"preview","lines":74,"preview":{"text":"# =====================================================================\n# L-009 HERMETIC OFFLINE BUILD (DocuSeal 3.3.3, AGPL-3.0). Run by build_kit's\n# L-009 buildx:  docker buildx build --network=none --attest ... --push <ctx>\n#\n# Pinned-public-base + fully-vendored (no network at build). ALPINE build: instead\n# of an offline apk repo (which hits a local-repo version quirk), we overlay the\n# RUNTIME SYSTEM DIRS captured online from the vendor build stage onto the identical\n# pinned base — version-consistent by construction, no apk at build.\n#   - ruby:4.0.5-alpine pinned BY DIGEST (musl base; REQUIRED — DocuSeal's patched\n#     PDFium exists only for musl; onnxruntime + leptonica are apk packages)\n#   - runtime-rootfs.tar.gz : /usr /lib /etc /var /sbin /bin from the online build,\n#     AFTER `apk upgrade` (Alpine's security fixes) + the runtime libs (libpq/vips/\n#     redis/onnxruntime/leptonica/jemalloc/fonts/fontconfig) + libpdfium + the docuseal user +\n#     openssl_legacy.cnf + apk db — NO /usr/local\n#   - bundle/rubygems/app/fonts.tar.gz : the ALREADY-BUILT gems (native-compiled),\n#     the PURGED default gems (json 2.18.0 / net-imap 0.6.2 removed), the app\n#     (Vue/Tailwind packs, bootsnap cache, onnx model), and the font files.\n# Dockerfile and Dockerfile.offline are copies of Dockerfile.offline.pinned.\n# =====================================================================\nFROM ruby:4.0.5-alpine@sha256:f48938e9ae72a4d32e728b03c306e7a7ff21f0cb6c2ed33f44a078c700b2aea6\nARG SOURCE_DATE_EPOCH=1792411032\nENV RAILS_ENV=production \\\n    BUNDLE_WITHOUT=\"development:test\" \\\n    OPENSSL_CONF=/etc/openssl_legacy.cnf \\","lines_shown":24,"lines_total":74}},{"path":"Dockerfile.vendor","size":12271,"sha256":"1683d87d2ce66ea484821b8100b43c71d4143b83dbd2eb41ea1207e3023abbe1","public":"account","lines":152},{"path":"MANIFEST.txt","size":85713,"sha256":"217ed865bedf1258f84d49db723a4ce3e83aa6b86d8e050dd02a316788320936","public":"account","lines":1231},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"fad71359163b35280224d5ed8fe742b2ccfc1b3364dea5ee05e34885ef82adfb","public":"full","lines":1,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/SOURCE_DATE_EPOCH.txt","text":"1792411032\n"},{"path":"TARGET_DIGEST.txt","size":272,"sha256":"4999cafd8f2de09ba1e462ae78e83d858d1ed855a17d4d4b1a9432b2ba9fa9fb","public":"full","lines":6,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:170e4c988261fc9c066f02094fb0060885450920ba28aa8f78ad7cd81d257c5a\nconfig_digest=sha256:11344a9835a7ab69a554ed81eb51ff0d661fc1c97b6520b56369fd232fa1b880\ntag=readystack/docuseal:3.3.3-CE-alpine-r3\nprobe_port=3000\nprobe_path=/up\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":2257,"sha256":"e67dff1944494e9acd53b6622cf515cc77cd0eec7e0e524643098ae5787aa50e","public":"account","lines":29},{"path":"docs/REBUILD.md","size":5082,"sha256":"a35f534a4f2c324f0a9febcd00772fd271f58376b6ef1a104a2df3da5914e793","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1934,"sha256":"65742a8f4b6b3f35e6b55c4f351caeb307bf31a3a7f5644ccef144a3a22c122a","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":51,"sha256":"96576211020fbb350842133a8fdbaa021a65bd4d3fa996e6821191d10f037648","public":"full","lines":2,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for docuseal (resolve at build_kit)\n\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":1100,"sha256":"684a1d1aa830e939f18f4f85d6c53150472a7d97cdd2e79eb0d60982cc54f4f8","public":"account","lines":28},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":651,"sha256":"078adb706c25fec06a3cb6d04482171183f2611bdada10609b013fd49d20ce3d","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":55024,"sha256":"420f936512d7a8d1bac6f9c2e1cc91f8ebb0ac343ca8b7c56d9055546c1b4aa8","public":"account","lines":1146},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":309,"sha256":"58b53d10faeedce24c9c461e6b81d54479e6c6e4ea8319abe7753869a0fe0679","public":"full","lines":9,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"docuseal\",\n  \"repo\": \"https://github.com/docusealco/docuseal\",\n  \"ref\": \"3.3.3\",\n  \"commit\": \"8f8f69f0bc6ac2e59746cd6efac54a852289bec3\",\n  \"tree_listing_sha256\": \"1ec66f06eec552aee5b374983c2e967169a4a1a7751f504ba7d848a9f894f53e\",\n  \"file_count\": 1139\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":105,"sha256":"998caf54cfeea05f7ef929adb9502e16305bf9c81ff788de86e1a8d49d8b9fcb","public":"account","lines":11},{"path":"docs/provenance/TOOLCHAIN.lock","size":1077,"sha256":"afa454b8e64ede5c2256a70442ff45836645da3fa0f4fa054aecbd1815bb8de3","public":"account","lines":37},{"path":"rebuild.json","size":1156,"sha256":"20b8b3666a336ca3307d5ccd010e833ec43f052856c91d9abc11fd6d22b2a2d3","public":"account","lines":33},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/docuseal/3.3.3-CE-alpine-r3/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":8,"bytes":50001565},"docs":{"files":1193,"bytes":8955790},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":6,"bytes":206523009}},"links":{"page":"https://readystack.dev/products/docuseal/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fdocuseal%2Frecipe","kit":"https://readystack.dev/buy.html?product=docuseal"}}