{"slug":"haproxy","tag":"3.4.6-CE-ubuntu24.04-r4","current":true,"account":false,"tarball":"ReadyStack-haproxy-3.4.6-CE-ubuntu24.04-r4.tar.gz","tarball_sha256":"add3d5b1867aa28e1e50caaf4d870cf02c4fcc619a92f577703b4132769a93a3","generated_at":"2026-10-29T19:36:12Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://git.haproxy.org/git/haproxy-3.4.git","ref":"v3.4.6","commit":"56332c50b5291cfbbfd440d958adc988fbf87e2f","url":"https://git.haproxy.org/git/haproxy-3.4"},"fetches":[{"kind":"git","url":"https://git.haproxy.org/git/haproxy-3.4.git","ref":"v3.4.6"}],"bases":[{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"]},"build_method":"source-rebuild-c","source_date_epoch":1790604274,"source_date_epoch_utc":"2026-09-28T14:04:34Z","target":{"image":"readystack/haproxy:3.4.6-CE-ubuntu24.04-r4","image_manifest_digest":"sha256:2ccdcd3294917901aef07b97f1b8036a6da2f889a9b76dcfa68265478ec29887","config_digest":"sha256:c4838f4aa91db42fba659cd56f7e55797b9353655311424e842439edd3d31de8"},"checksummed_files":3165},"files":[{"path":"BASES.tsv","size":121,"sha256":"0da49a3ea98fcaa345080b1a4230d2c798b395f71854063c2af657eb53a8a2e0","public":"full","lines":1,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/BASES.tsv","text":"ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":387841,"sha256":"ecd56de9836aee7ca8153d141db410d99828b370f857cf3973c2e108b6435be1","public":"account","lines":3165},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":4307,"sha256":"52c33d660253d4558f1f4770d0d17478a33f1c8efda8f559e0756bfcd63cdcbf","public":"account","lines":52},{"path":"Dockerfile.offline","size":4307,"sha256":"52c33d660253d4558f1f4770d0d17478a33f1c8efda8f559e0756bfcd63cdcbf","public":"account","lines":52},{"path":"Dockerfile.offline.pinned","size":4307,"sha256":"52c33d660253d4558f1f4770d0d17478a33f1c8efda8f559e0756bfcd63cdcbf","public":"preview","lines":52,"preview":{"text":"# GENERATED L-009 hermetic C build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases; vendored source (in-tree deps) + extra build debs + runtime debs from Dockerfile.vendor.\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c AS cbuild\n# dpkg-install the vendored EXTRA build debs (pkg-config/libssl-dev/...) — gcc/make are in the builder.\nRUN --mount=type=bind,source=vendored/build-debs,target=/tmp/bdebs \\\n    set --; for f in /tmp/bdebs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; }\nWORKDIR /src\nCOPY vendored/haproxy-src/ .\nARG SOURCE_DATE_EPOCH=1790604274\nENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}\nRUN make -j\"$(nproc)\" TARGET=linux-glibc USE_OPENSSL=1 USE_QUIC=1 USE_QUIC_OPENSSL_COMPAT=1 USE_LUA=1 USE_PCRE2=1 USE_PCRE2_JIT=1 USE_PROMEX=1\nRUN make install-bin PREFIX=/opt/haproxy\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\nENV DEBIAN_FRONTEND=noninteractive PATH=/opt/haproxy/sbin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\nRUN --mount=type=bind,source=vendored/debs,target=/tmp/debs \\\n    set --; for f in /tmp/debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\","lines_shown":24,"lines_total":52}},{"path":"Dockerfile.vendor","size":1862,"sha256":"4ade384bfd5717a746d32509087ea3dd35d3a481a5008757475734c9d31adbd9","public":"account","lines":26},{"path":"MANIFEST.txt","size":172651,"sha256":"a851cd845e64797eacdbcc7d85c956c1bb54223b81adb96aba61c062b63f5b5e","public":"account","lines":3167},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"2d6041cdf4798e068bd1a80af590ca4df56d4cdd71e337ce5a9683aecffa48ec","public":"full","lines":1,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/SOURCE_DATE_EPOCH.txt","text":"1790604274\n"},{"path":"TARGET_DIGEST.txt","size":281,"sha256":"3338d010af70f7348e951add75ad8ef4739e37810a222514e9357264377c9830","public":"full","lines":6,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:2ccdcd3294917901aef07b97f1b8036a6da2f889a9b76dcfa68265478ec29887\nconfig_digest=sha256:c4838f4aa91db42fba659cd56f7e55797b9353655311424e842439edd3d31de8\ntag=readystack/haproxy:3.4.6-CE-ubuntu24.04-r4\nprobe_port=8080\nprobe_path=/healthz\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":1848,"sha256":"587c12e7b0028b66d3480a76f9003beef3a0cff16942e4fdf1f91601558db9ab","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5088,"sha256":"5cc871923e76ee29d92a1f1f95cb561394e8c67ab06982bce3f4b85474467eda","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1953,"sha256":"c97884106df38303935720308546a85673aa99b7437cfe7577517a273b02cc46","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":62,"sha256":"6d9a4296ecce750fa870c311a495e613d0372be3e4a93e7e73188f42461ad10c","public":"full","lines":2,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for haproxy (resolve at build_kit)\nubuntu:24.04\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":2724,"sha256":"ea25e5610cba917c08194c98c01b08b25f81306be8026d6d7ea3df116f1d3f0d","public":"account","lines":49},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":736,"sha256":"4b93f8a169f0ff3037a3fdec3718f8436f973828f1c6d64efee713522c09b4ac","public":"account","lines":21},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":53915,"sha256":"f479416e5866141c83988db37adc920739d9ef06d2e1e4238d601bf81cc65f02","public":"account","lines":1504},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":314,"sha256":"f69a45fc517b812ecab680877b291e1a8444a4b41303c66a9769f65b2880c70f","public":"full","lines":9,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"haproxy\",\n  \"repo\": \"https://git.haproxy.org/git/haproxy-3.4.git\",\n  \"ref\": \"v3.4.6\",\n  \"commit\": \"56332c50b5291cfbbfd440d958adc988fbf87e2f\",\n  \"tree_listing_sha256\": \"98cbc2f2c71839bc24fb4454799e109179f1a5360386051ccc40b4b2b88c6216\",\n  \"file_count\": 1497\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":80,"sha256":"dc0450801fe7951c5a391d528a3bc47c4292afaa40b1898328270df8bca672cb","public":"account","lines":7},{"path":"docs/provenance/TOOLCHAIN.lock","size":2369,"sha256":"079602ba79879061c1d7f6351b3770496fa4e431a64e42d8e5af7d2a2d4666a8","public":"account","lines":68},{"path":"haproxy.cfg","size":1282,"sha256":"7976189010c2dd85b2e7408a2c401a0123929e095595f628807e7feaf2e81811","public":"account","lines":31},{"path":"rebuild.json","size":1155,"sha256":"3040f19342f839cd1cfe5063ebcf82197ad63f8876353359677bed4c4aaa6e88","public":"account","lines":33},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/haproxy/3.4.6-CE-ubuntu24.04-r4/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":5,"bytes":29771169},"docs":{"files":1547,"bytes":24808600},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":1589,"bytes":111319527}},"links":{"page":"https://readystack.dev/products/haproxy/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fhaproxy%2Frecipe","kit":"https://readystack.dev/buy.html?product=haproxy"}}