{"slug":"gitea","tag":"v28.2.0-CE-ubuntu24.04-r2","current":true,"account":false,"tarball":"ReadyStack-gitea-v28.2.0-CE-ubuntu24.04-r2.tar.gz","tarball_sha256":"5dd4fdcf3d9236d468ed8460ceeadc1e6dad0d9d94100c772351423272d3293e","generated_at":"2026-10-29T19:35:34Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/go-gitea/gitea.git","ref":"v28.2.0","commit":"829b49c1ae96015e345f9d2a0eb1ea7acd5f31e1","url":"https://github.com/go-gitea/gitea/tree/829b49c1ae96015e345f9d2a0eb1ea7acd5f31e1"},"fetches":[{"kind":"git","url":"https://github.com/git-lfs/git-lfs.git","ref":"v3.8.0"},{"kind":"git","url":"https://github.com/go-gitea/gitea.git","ref":"v28.2.0"},{"kind":"http","url":"https://deb.nodesource.com/setup_22.x"}],"bases":[{"image":"golang:1.27.3-bookworm","digest":"sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"]},"build_method":"source-rebuild-go","source_date_epoch":1792345836,"source_date_epoch_utc":"2026-10-18T17:50:36Z","target":{"image":"readystack/gitea:v28.2.0-CE-ubuntu24.04-r2","image_manifest_digest":"sha256:2ed51d5a2ab0feeb0e392b90c626c027da93feaf15fa63770a2c41ed7d909a45","config_digest":"sha256:ddc94b1b535e15fcb0291012ed0023fc532984bc4c7c00d71abd7c4dcb930361"},"checksummed_files":24330},"files":[{"path":"BASES.tsv","size":262,"sha256":"203db39d31165cdf0ef7de9050461c107d9b50e5f22ecc1739a0ecbc33f89b79","public":"full","lines":2,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/BASES.tsv","text":"golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5\tbases/golang_1.27.3-bookworm_972b4110ba0f.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":3342459,"sha256":"300d03b7dba81d74d1df66f2e6dff5db8e9c5a79602d9b02b1b71eea89986b08","public":"account","lines":24330},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":2881,"sha256":"76b5ee75ec79ddbcc9505483cbe3111193792f45b589a648a70fa34eeeae075a","public":"account","lines":48},{"path":"Dockerfile.base","size":830,"sha256":"743ff38417f2cc9095d43ba7301fc9a31524c7d1160241f06f2bee535a497e9e","public":"account","lines":13},{"path":"Dockerfile.offline","size":2881,"sha256":"76b5ee75ec79ddbcc9505483cbe3111193792f45b589a648a70fa34eeeae075a","public":"account","lines":48},{"path":"Dockerfile.offline.pinned","size":3443,"sha256":"b7dbfc1df07cbd2f76fae383a633e0433812420e2334eeb23190e0ba876b1088","public":"preview","lines":56,"preview":{"text":"# =====================================================================\n# L-009 HERMETIC OFFLINE BUILD (gitea) — the canonical, attestation-\n# producing build, run by build_kit's L-009 buildx:\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <git-context>\n#\n# Pinned-public-base + vendored model (self-contained; no FROM gitea-base:offline):\n#   - golang + ubuntu pinned BY DIGEST (same digests as caddy/traefik — warm in the\n#     builder cache; RUN steps are --network=none hermetic)\n#   - vendored/git-lfs-src + vendored/gitea-src : fully-vendored Go trees + the prebuilt\n#     gitea frontend (materialized by `make build` in the vendor stage), GOPROXY=off\n#   - vendored/debs : apt CVE-upgrade closure + gitea runtime pkgs, dpkg offline\n# Two binaries: git-lfs (CGO off) + gitea (CGO on for sqlite, tags bindata+sqlite).\n# =====================================================================\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS lfs\nWORKDIR /lfs\nCOPY vendored/git-lfs-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=\"-buildvcs=false -mod=vendor\" GOPROXY=off\nRUN go build -trimpath -ldflags=\"-s -w -X github.com/git-lfs/git-lfs/v3/config.Version=3.8.0\" -o /git-lfs . && /git-lfs version\n\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS gitea\nWORKDIR /src\nCOPY vendored/gitea-src/ .\nENV CGO_ENABLED=1 GOTOOLCHAIN=local GOFLAGS=\"-mod=vendor\" GOPROXY=off","lines_shown":24,"lines_total":56}},{"path":"Dockerfile.vendor","size":4192,"sha256":"a770751288fa52b70b7efa6fd82e3a9c139d08c378d6afbf2682e1de8852cb6b","public":"account","lines":58},{"path":"MANIFEST.txt","size":1688049,"sha256":"f9a58d66357b1c666451ba4135cf1cc1a50b8e927060b1ea2fd0a091113ee069","public":"account","lines":24332},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"b4c2f30c50590d7ca94bc3f188dae18e138e6aa367388d1ff7ec64f0996fcd3e","public":"full","lines":1,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/SOURCE_DATE_EPOCH.txt","text":"1792345836\n"},{"path":"TARGET_DIGEST.txt","size":285,"sha256":"37804a5dc313b807122e194a096beca7cf662b7edbe8d944ecb3ad4ad4f8cec4","public":"full","lines":6,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:2ed51d5a2ab0feeb0e392b90c626c027da93feaf15fa63770a2c41ed7d909a45\nconfig_digest=sha256:ddc94b1b535e15fcb0291012ed0023fc532984bc4c7c00d71abd7c4dcb930361\ntag=readystack/gitea:v28.2.0-CE-ubuntu24.04-r2\nprobe_port=3000\nprobe_path=/api/healthz\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":1769,"sha256":"0794eb0815836722c217da9fc2be14cbc1fbf041c5fd63216936f21f5fb4160f","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5087,"sha256":"cfa3d960fd7ff5498f431fa3ca2a127f3be920593ea943b142bb7ac0883fba2e","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1951,"sha256":"66752decaf4e2091a0c1f572ab743de32f914b9ff74199fbc078b8bb1aed98e2","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":70,"sha256":"f19d82cf77e6d0db2fb978e8825ab8b0db9c8c6bac594ca732b5baa9d615122c","public":"full","lines":2,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for gitea (resolve at build_kit)\ngolang:1.27.3-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":1267,"sha256":"5f40ba6a8f30c4dad14a4f524c686cc77d226a3b1b30fb6a31322e47f11f7ad6","public":"account","lines":34},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":649,"sha256":"60e21d168a6b2d34f83a4a488ef6bd46a9b9cbdf31d054471540b565f8d33c75","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":227071,"sha256":"2647d74c782416d6ebe02d46d9052ae5aff7a860a8e2f818f8fd197c0ea0e3a2","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":307,"sha256":"d15b2d2cbe75a1dfe2392c4b14c1d7ed8073c68dd3b4d13d9795ce6de3361df8","public":"full","lines":9,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"gitea\",\n  \"repo\": \"https://github.com/go-gitea/gitea.git\",\n  \"ref\": \"v28.2.0\",\n  \"commit\": \"829b49c1ae96015e345f9d2a0eb1ea7acd5f31e1\",\n  \"tree_listing_sha256\": \"4f6d79cfde19681f67ab5a0d3ba7315c8034a3849c8bc77ce5937781ce5c98a2\",\n  \"file_count\": 6366\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":65,"sha256":"37e9f8d948467c0d2f9cfa091d5685bd4e3ab4575eeae164d5b31b54b076fd9a","public":"account","lines":7},{"path":"docs/provenance/TOOLCHAIN.lock","size":2527,"sha256":"89973f85e800230fbda5fa6c05857b7b75f24f1e751322089d8545cda5babc4d","public":"account","lines":57},{"path":"entrypoint.sh","size":2819,"sha256":"f0606ecc30676ecdeec42a8fae4949c5ad448ec3052427c7b90f45555a4cb994","public":"account","lines":66},{"path":"rebuild.json","size":1438,"sha256":"3b4e96827260b0572421401cc227edd014d15278404b441370cb178c71177d35","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/gitea/v28.2.0-CE-ubuntu24.04-r2/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":330381419},"docs":{"files":6420,"bytes":38971138},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":17869,"bytes":343628572}},"links":{"page":"https://readystack.dev/products/gitea/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fgitea%2Frecipe","kit":"https://readystack.dev/buy.html?product=gitea"}}