{"slug":"flannelcniplugin","tag":"v1.9.1-flannel3-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-flannelcniplugin-v1.9.1-flannel3-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"46568ea441c873935be892737779c7498f71f188ec7962970b17e149a627f8b2","generated_at":"2026-10-29T19:34:55Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/flannel-io/cni-plugin","ref":"v1.9.1-flannel3","commit":"b380f201008e9bed159703846cf10d3c50b4f9ce","url":"https://github.com/flannel-io/cni-plugin/tree/b380f201008e9bed159703846cf10d3c50b4f9ce"},"fetches":[{"kind":"git","url":"https://github.com/flannel-io/cni-plugin","ref":"v1.9.1-flannel3"},{"kind":"http","url":"https://github.com/canonical/chisel/releases/download/v1.5.1/chisel_v1.5.1_linux_amd64.tar.gz"},{"kind":"http","url":"https://github.com/canonical/chisel-releases/archive/f2600d3aa90123db6d44bb1441a99afc8b5847d9.tar.gz"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1786091006,"source_date_epoch_utc":"2026-08-07T08:23:26Z","target":{"image":"readystack/flannelcniplugin:v1.9.1-flannel3-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:4511acd7413d1e6fd78d3d712921d794cb820a3b62973512532d7b64f2cc4e8a","config_digest":"sha256:72281e62a4fb98749aaac8f4525d44d61b32494f4ae1a51a9547a479fcc124d9"},"checksummed_files":1657},"files":[{"path":"BASES.tsv","size":264,"sha256":"98233a2e2970f9c85252887b94bd7ed3933410509ec56d9007b0b25aea7aaa66","public":"full","lines":2,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852\tbases/ubuntu_24.04_fe81560990fa.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":249703,"sha256":"2bf1539c7d4db1636de274b9126ae9b49a56849c3d6f32ed360363d1317812e0","public":"account","lines":1657},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":3899,"sha256":"75c41a26acd39ade2c3252f0387da41933dba15a43fe4212c1d773fb13a80a86","public":"account","lines":47},{"path":"Dockerfile.offline","size":3899,"sha256":"75c41a26acd39ade2c3252f0387da41933dba15a43fe4212c1d773fb13a80a86","public":"account","lines":47},{"path":"Dockerfile.offline.pinned","size":3899,"sha256":"75c41a26acd39ade2c3252f0387da41933dba15a43fe4212c1d773fb13a80a86","public":"preview","lines":47,"preview":{"text":"# GENERATED L-009 hermetic build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Go tree + debs from Dockerfile.vendor.\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_flannel\nWORKDIR /src\nCOPY vendored/flannelcniplugin-src/ .\nENV CGO_ENABLED=1 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1786091006\nRUN go build -trimpath -tags \"netgo osusergo no_stage static_build\" -ldflags='-extldflags -static -w -X main.Version=v1.9.1 -X main.Commit=b380f201 -X main.Program=flannel' -o /flannel . && /flannel version > /tmp/flannel.version 2>&1; cat /tmp/flannel.version; grep -qF 'CNI Plugin flannel version v1.9.1' /tmp/flannel.version || { echo 'flannel version does not report CNI Plugin flannel version v1.9.1'; exit 1; } && \\\n    { readelf -lW /flannel | sed -n 's/.*Requesting program interpreter: \\(.*\\)]$/\\1/p'; readelf -dW /flannel | sed -n 's/.*Shared library: \\[\\(.*\\)\\]$/\\1/p'; } > /flannel.needs\n# rs-probe: the HEALTHCHECK helper (standard library only, from the kit's rs-probe.go)\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build_rs_probe\nWORKDIR /probe\nCOPY rs-probe.go main.go\nCOPY rs-probe.mod go.mod\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=\"-buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1786091006\nRUN go build -trimpath -ldflags='-s -w' -o /rs-probe .\n# the chiselled rootfs (vendored/chisel, cut by Dockerfile.vendor), the service user, the binaries\nFROM ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 AS rootfs\nARG SOURCE_DATE_EPOCH=1786091006\nADD vendored/chisel/rootfs.tar /rootfs/\nRUN printf 'flannelcniplugin:x:999:999::/var/lib/flannelcniplugin:/bin/sh\\n' >> /rootfs/etc/passwd && printf 'flannelcniplugin:x:999:\\n' >> /rootfs/etc/group && \\\n    mkdir -p /rootfs/var/lib/flannelcniplugin && chown -R 999:999 /rootfs/var/lib/flannelcniplugin\nCOPY --from=build_flannel /flannel /rootfs/flannel\nCOPY --from=build_flannel /flannel.needs /tmp/needs/flannel\nCOPY --from=build_rs_probe /rs-probe /rootfs/usr/local/bin/rs-probe","lines_shown":24,"lines_total":47}},{"path":"Dockerfile.vendor","size":4279,"sha256":"d917d3c82687d3c71bbace83ff1d323216fe916d2fdd548753dd55d097fc7bbf","public":"account","lines":34},{"path":"MANIFEST.txt","size":137057,"sha256":"3b5e19546272fd297a08ea0f225bebc45f3e22ad5cb4a154c782a518315df896","public":"account","lines":1659},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"dcc2b1ce685a4057e25965c692f6cfa198d0f85393651f008ad0ced09bf86546","public":"full","lines":1,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1786091006\n"},{"path":"TARGET_DIGEST.txt","size":423,"sha256":"385c6849c5c674453db24d1031930d6822b46b65fc8f7bf0a94c6d3138a6785c","public":"full","lines":10,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:4511acd7413d1e6fd78d3d712921d794cb820a3b62973512532d7b64f2cc4e8a\nconfig_digest=sha256:72281e62a4fb98749aaac8f4525d44d61b32494f4ae1a51a9547a479fcc124d9\ntag=readystack/flannelcniplugin:v1.9.1-flannel3-CE-ubuntu24.04-r1\nprobe_port=80\nprobe_path=/\nprobe_timeout=180\nprobe_exec=/flannel version\nverify_boot=oneshot\nverify_oneshot_arg=/flannel\nverify_oneshot_expect=CNI Plugin flannel version v1.9.1\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1838,"sha256":"212a74b61ba2bc897016067fb3eb55ba36373c43f8835d34c749d66f08d4b687","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5484,"sha256":"807e11271a871015de614f7ff8a15fab4c1545e89d574bb5e4d9d577ccd8147f","public":"account","lines":59},{"path":"docs/VERIFY.md","size":2059,"sha256":"8da1eedcf79601811b2e2d2902d6e17782a5126b2156f9a1ca1180e34873336d","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":82,"sha256":"3f139d4a66339e8d64f63dd4440c50f26261099e61c373eefaa589ef3ff5da97","public":"full","lines":2,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for flannelcniplugin (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":2157,"sha256":"c8b265e0e943589daedd36988d7d5cd53e99ee2ae2d383986b35018ee03109f3","public":"account","lines":48},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":671,"sha256":"f88bbd6e41c71ee8f6185c1a5c90378b7754710ddde46fd35833726cb100eeea","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":766,"sha256":"9863bd56b7819bb19c020cf8c24a364b296099352a414868cb19a381b658002b","public":"account","lines":33},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":327,"sha256":"851d44d79586254703c6995c7b5b28399e12a37ed8b303068a6e3ca988dd2420","public":"full","lines":9,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"flannelcniplugin\",\n  \"repo\": \"https://github.com/flannel-io/cni-plugin\",\n  \"ref\": \"v1.9.1-flannel3\",\n  \"commit\": \"b380f201008e9bed159703846cf10d3c50b4f9ce\",\n  \"tree_listing_sha256\": \"0a7880b2dc90b22720e84af9cc7fe703812caf54d2c51fd01849a861d6fc7508\",\n  \"file_count\": 26\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":23,"sha256":"0630392bbd9f11668e937cf0a980d4ae742c8b5f21b00e3da52f03a270846dd7","public":"account","lines":2},{"path":"docs/provenance/TOOLCHAIN.lock","size":2126,"sha256":"ffb4bca3b8e616c4b4c9df18e39d29613a0e5f242c9dde462054abee10dd9dd7","public":"account","lines":70},{"path":"rebuild.json","size":1506,"sha256":"1b2b6e728dc2500013bcfc74ee867b8b594cd14e0df7710a3619ee995e91ea0c","public":"account","lines":41},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/flannelcniplugin/v1.9.1-flannel3-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":78,"bytes":758222},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":1538,"bytes":48764787}},"links":{"page":"https://readystack.dev/products/flannelcniplugin/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fflannelcniplugin%2Frecipe","kit":"https://readystack.dev/buy.html?product=flannelcniplugin"}}