{"slug":"flannel","tag":"v0.28.10-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-flannel-v0.28.10-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"fd6820ad4770f44a4acbacea01c62a91877f3494d96f0e78ffe097b99dae1a97","generated_at":"2026-10-29T19:34:49Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/flannel-io/flannel","ref":"v0.28.10","commit":"0f70536f15f281279dab39fb9d575c646c7eea34","url":"https://github.com/flannel-io/flannel/tree/0f70536f15f281279dab39fb9d575c646c7eea34"},"fetches":[{"kind":"git","url":"https://github.com/flannel-io/flannel","ref":"v0.28.10"},{"kind":"http","url":"https://github.com/kubernetes-sigs/iptables-wrappers"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1791471824,"source_date_epoch_utc":"2026-10-08T15:03:44Z","target":{"image":"readystack/flannel:v0.28.10-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:6d3fb1140502d71df92ae2b107532acaf809aa42a94e2e6b9eec291fab4b8856","config_digest":"sha256:5b82632df69bb60c07454007291520843b134dffd8918b0d53167852a6a99d3b"},"checksummed_files":7208},"files":[{"path":"BASES.tsv","size":264,"sha256":"98233a2e2970f9c85252887b94bd7ed3933410509ec56d9007b0b25aea7aaa66","public":"full","lines":2,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852\tbases/ubuntu_24.04_fe81560990fa.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":1054277,"sha256":"cc4664bbe33b6c1a9f32a29ed7c2490b07f73ed4de9e5065140d14d93ea90a59","public":"account","lines":7208},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":6762,"sha256":"11aa83f83567c5a63d385a082b27a355b079e71a711672df825709db39ee5c6b","public":"account","lines":91},{"path":"Dockerfile.offline","size":6762,"sha256":"11aa83f83567c5a63d385a082b27a355b079e71a711672df825709db39ee5c6b","public":"account","lines":91},{"path":"Dockerfile.offline.pinned","size":6762,"sha256":"11aa83f83567c5a63d385a082b27a355b079e71a711672df825709db39ee5c6b","public":"preview","lines":91,"preview":{"text":"# =====================================================================\n# L-009 HERMETIC OFFLINE BUILD (flannel v0.28.10) — the canonical,\n# attestation-producing build (build_kit: buildx --network=none --attest ...).\n# Follows upstream's images/Dockerfile at the pinned commit:\n#   /opt/bin/flanneld        make dist/flanneld: CGO_ENABLED=1 on amd64 (the UDP\n#                            backend's C proxy), -X pkg/version.Version=<tag>\n#   /opt/bin/install-conf    CGO_ENABLED=0 go build ./cmd/install_conf/\n#   /opt/bin/mk-docker-opts.sh  dist/mk-docker-opts.sh\n#   /usr/sbin/iptables-wrapper  kubernetes-sigs/iptables-wrappers `make build`,\n#                            then `iptables-wrapper install` (iptables legacy or\n#                            nft picked at first use, matching the host)\n#   ENTRYPOINT [\"/opt/bin/flanneld\"]\n# Runtime userland from Ubuntu 24.04 packages in place of upstream's Alpine ones.\n# flanneld links glibc dynamically (upstream links musl statically): it runs\n# only inside this image, whose glibc it is built against.\n# Default user is the unprivileged flannel (owner 2026-10-28); kube-flannel's\n# pod gives root (runAsUser: 0, NET_ADMIN, NET_RAW), product-kits/kubevirt-stack/\n# install/network/kube-flannel.yml.\n# =====================================================================\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_flanneld\nWORKDIR /src\nCOPY vendored/flannel-src/ .\nENV CGO_ENABLED=1 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1791471824\nRUN go build -trimpath -ldflags='-s -w -X github.com/flannel-io/flannel/pkg/version.Version=v0.28.10' -o /flanneld . && \\","lines_shown":24,"lines_total":91}},{"path":"Dockerfile.vendor","size":3386,"sha256":"1538d2b829248db6fc9181ed3e8bca0f371f05f83f71845b35e8168fc872db78","public":"account","lines":42},{"path":"MANIFEST.txt","size":564163,"sha256":"a25da53509dcea08b25f5d3e298f429a62f8d66038e2a95dcde42659b16eebfd","public":"account","lines":7210},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"b408c744f5a49b6351cac41558018dfa6bdfd04df11b3fa03111f3d5060a09f7","public":"full","lines":1,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1791471824\n"},{"path":"TARGET_DIGEST.txt","size":394,"sha256":"84c4c119aa2d9987e23980b600c71484b0ef4fef2cc059fed60a870b202179f7","public":"full","lines":10,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:6d3fb1140502d71df92ae2b107532acaf809aa42a94e2e6b9eec291fab4b8856\nconfig_digest=sha256:5b82632df69bb60c07454007291520843b134dffd8918b0d53167852a6a99d3b\ntag=readystack/flannel:v0.28.10-CE-ubuntu24.04-r1\nprobe_port=80\nprobe_path=/\nprobe_timeout=180\nprobe_exec=/opt/bin/flanneld --version\nverify_boot=oneshot\nverify_oneshot_arg=--version\nverify_oneshot_expect=v0.28.10\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1706,"sha256":"320d37cd9391a195c2676831c7d43a72c0f72bbc59f96e8e31c776f3f37a0b27","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5347,"sha256":"6e5ab91e3bc6b47cb0ebc47c92a1da654a1c0a7ff0f591ac10fc57d4c0290218","public":"account","lines":59},{"path":"docs/VERIFY.md","size":1968,"sha256":"18cf0019fe85c075fac015bacce596e95aef17e587db3caa25eba02f75ee49a7","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":73,"sha256":"db2bbcd2daef5befacd86f537c3fe77e5939a3b018ef2676cf617403718cee35","public":"full","lines":2,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for flannel (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":3240,"sha256":"49eb98b3ca42a54ec93280c18b859bdb4af9e3ad2da7638ba1acb5b3ae15008f","public":"account","lines":78},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":652,"sha256":"a1add4ac0381c032c82595d2a25613fed4efbb0bba0f91f096d6dfddbb6946a9","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":8390,"sha256":"ca129f84c7741b00e3ea6d7554cf48a30dba6e7c001a92fa6d7570452f5c1a3c","public":"account","lines":240},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":309,"sha256":"942abfcff1f3fa94632de9ae1b6b7a6570dc4504d3146e4851ec4f54ebfc7e93","public":"full","lines":9,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"flannel\",\n  \"repo\": \"https://github.com/flannel-io/flannel\",\n  \"ref\": \"v0.28.10\",\n  \"commit\": \"0f70536f15f281279dab39fb9d575c646c7eea34\",\n  \"tree_listing_sha256\": \"bbe66e8e8707707772a4adfd0736949bd0a08956e8fc55fadf84c9ff7fd05e33\",\n  \"file_count\": 233\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":89,"sha256":"be0f0e7ecde121567a682dc0dfb4bc9bdb877fbf84e42ca8cdccc63698a60bce","public":"account","lines":7},{"path":"docs/provenance/TOOLCHAIN.lock","size":3299,"sha256":"28da1f4b423fcac412306876f959be9e4888b30e5d5ca52a3be7dccb987505dc","public":"account","lines":108},{"path":"rebuild.json","size":1466,"sha256":"e0a0edcf6c6b962d2da7061b9d03b04e27fc7e616d0307b328228832bfea8c40","public":"account","lines":41},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/flannel/v0.28.10-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":283,"bytes":6518641},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":6886,"bytes":77976978}},"links":{"page":"https://readystack.dev/products/flannel/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fflannel%2Frecipe","kit":"https://readystack.dev/buy.html?product=flannel"}}