{"slug":"metabase","tag":"v0.64.3.5-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-metabase-v0.64.3.5-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"697aa3bc74da89978c0232cb2c3c967a56c9616f918b0c98644ef757101ba5a4","generated_at":"2026-10-29T19:44:29Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/metabase/metabase","ref":"v0.64.3.5","commit":"125ddeaf5cc5bf07e8c8713d47834db69c9ada75","url":"https://github.com/metabase/metabase/tree/125ddeaf5cc5bf07e8c8713d47834db69c9ada75"},"fetches":[{"kind":"git","url":"https://github.com/metabase/metabase","ref":"v0.64.3.5"},{"kind":"http","url":"https://nodejs.org/dist/v22.23.2/node-v22.23.2-linux-x64.tar.xz"},{"kind":"http","url":"https://github.com/clojure/brew-install/releases/download/1.12.0.1488/clojure-tools-1.12.0.1488.tar.gz"},{"kind":"http","url":"https://github.com/astral-sh/uv/releases/download/0.10.2/uv-x86_64-unknown-linux-gnu.tar.gz"}],"bases":[{"image":"eclipse-temurin:25-jdk-noble","digest":"sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4"},{"image":"eclipse-temurin:25-jre-noble","digest":"sha256:ce8543ddd3070ccbeaac2106a74c9387ddeb8d47a1c43348345715c1ef245c7f"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["eclipse-temurin:25-jdk-noble@sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4"]},"build_method":"source-rebuild-java","source_date_epoch":1793027954,"source_date_epoch_utc":"2026-10-26T15:19:14Z","target":{"image":"readystack/metabase:v0.64.3.5-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:f8d26fce0c631e0baad7003a5f56195a777a122220312e636629850b0ef96edd","config_digest":"sha256:880f90dee0cbe77023ca801f814c49a1dd3a0d746cbe8a15ba160f794fcc9df5"},"checksummed_files":169920},"files":[{"path":"BASES.tsv","size":306,"sha256":"396c7396e5142d15f68238751953ae5f49656ce64c26fb590374adb106fd331e","public":"full","lines":2,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/BASES.tsv","text":"eclipse-temurin:25-jdk-noble@sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4\tbases/eclipse-temurin_25-jdk-noble_589ff4cc3f71.oci\neclipse-temurin:25-jre-noble@sha256:ce8543ddd3070ccbeaac2106a74c9387ddeb8d47a1c43348345715c1ef245c7f\tbases/eclipse-temurin_25-jre-noble_ce8543ddd307.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":30346810,"sha256":"60d8b78d3cc8553b209172225153c83ffcad03440027e9fd1bda36b1b500f9b6","public":"account","lines":169920},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":6008,"sha256":"5fc7879c7e1c89e099415c885aff296f5ad91124d281a4cd025d25d764751272","public":"account","lines":63},{"path":"Dockerfile.offline","size":6008,"sha256":"5fc7879c7e1c89e099415c885aff296f5ad91124d281a4cd025d25d764751272","public":"account","lines":63},{"path":"Dockerfile.offline.pinned","size":6008,"sha256":"5fc7879c7e1c89e099415c885aff296f5ad91124d281a4cd025d25d764751272","public":"preview","lines":63,"preview":{"text":"# GENERATED L-009 hermetic Java build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases; vendored source + clojure cache(s) + toolchain/runtime debs from Dockerfile.vendor.\nFROM eclipse-temurin:25-jdk-noble@sha256:589ff4cc3f71aab462e7048a47a0d10edf57fbccde3fceea2281e610bf5880b4 AS jbuild\n# dpkg-install the vendored build toolchain (git/unzip) — no apt, fully offline.\nRUN --mount=type=bind,source=vendored/build-debs,target=/tmp/bdebs \\\n    set --; for f in /tmp/bdebs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; }\nWORKDIR /src\nCOPY vendored/metabase-src/ .\nCOPY vendored/caches/opt/node/ /opt/node/\nCOPY vendored/caches/opt/clojure/ /opt/clojure/\nCOPY vendored/caches/root/.m2/repository/ /root/.m2/repository/\nCOPY vendored/caches/root/.gitlibs/ /root/.gitlibs/\nENV PATH=\"/opt/node/bin:/opt/clojure/bin:/root/.local/bin:$PATH\"\nENV MB_EDITION=\"oss\"\nENV INTERACTIVE=\"false\"\nENV HUSKY=\"0\"\nENV CYPRESS_INSTALL_BINARY=\"0\"\nCOPY kitforge-cljdeps.py /kitforge-cljdeps.py\nRUN python3 /kitforge-cljdeps.py hashagent /kitforge-namehash.jar\nRUN python3 /kitforge-cljdeps.py shadowdet shadow-cljs.edn /kitforge-namehash.jar","lines_shown":24,"lines_total":63}},{"path":"Dockerfile.vendor","size":4718,"sha256":"930fa06dd9a21daa4467bf29f720acf0c1af6a664f9f7eb30c2aa2c3b2a44e00","public":"account","lines":44},{"path":"MANIFEST.txt","size":18792280,"sha256":"c50acc13c5d26cfd153350bd41423f1f09a0d24494752264cb4729096a3b699b","public":"account","lines":169922},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"762e6f0a8faca75c8c9d0e978879530702de322220d61c0010fb61b14324df7e","public":"full","lines":1,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1793027954\n"},{"path":"TARGET_DIGEST.txt","size":289,"sha256":"ea1686ce65bc8a5581163dfeab34833e5af7c2c00c1ebf8b146a076d8405e3cc","public":"full","lines":6,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:f8d26fce0c631e0baad7003a5f56195a777a122220312e636629850b0ef96edd\nconfig_digest=sha256:880f90dee0cbe77023ca801f814c49a1dd3a0d746cbe8a15ba160f794fcc9df5\ntag=readystack/metabase:v0.64.3.5-CE-ubuntu24.04-r1\nprobe_port=3000\nprobe_path=/api/health\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":1732,"sha256":"fb4d369a2b9f14361c5e37038869edd8ffffa4919d8fd0aa7acf442f89040089","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5123,"sha256":"f483e46b28ab77b202ed7e44b8c2e817115a2f6756e22116052f477c9db53dc7","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1979,"sha256":"db3d7ed4d99de98fa936156e99844c4439db80b3b1c06cbb43dcc0d90470628c","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":79,"sha256":"a2deeab8bd028c8101f8b32b7b43dcf880bf06243ecbe4e1afb841e1da3c19c1","public":"full","lines":2,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for metabase (resolve at build_kit)\neclipse-temurin:25-jdk-noble\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":6799,"sha256":"e8fc961b32935f25e717ef026872d44a9809950331881fb983e9d9c118627985","public":"account","lines":84,"redactions":[{"line":73,"kind":"internal host"}],"kit_sha256":"7987cbd55bec4f4f28b93e947381e5b607754fb8ea36d1ed81e52b4fff3d7ca0"},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":702,"sha256":"a9ddd6e69a930bb154e65f4a90058c5f566cedda8dd09c0d2c92cc58328e5c5f","public":"account","lines":20},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":342023,"sha256":"d5f17fb3591c07aabccb8bec94d52d1710768381f52a1eb67649bf0464e73129","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":312,"sha256":"949ec310573c575363c6ef990e3965b44798968141b460faf4c631658831d688","public":"full","lines":9,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"metabase\",\n  \"repo\": \"https://github.com/metabase/metabase\",\n  \"ref\": \"v0.64.3.5\",\n  \"commit\": \"125ddeaf5cc5bf07e8c8713d47834db69c9ada75\",\n  \"tree_listing_sha256\": \"de3cdc590f670432c21b55f5673c424ae0753afc6136cd8b4b6e1318cd919637\",\n  \"file_count\": 19408\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":70,"sha256":"6b61cd5b39e984c6ecdd7be0bf82f66c951017c1e382a38b3463fa8a1db54392","public":"account","lines":6},{"path":"docs/provenance/TOOLCHAIN.lock","size":7686,"sha256":"810aa7316ac3a2d06ba3a84dc99a0867fc15205649c9bba0a6a27d24c6abb2ed","public":"account","lines":109},{"path":"kitforge-cljdeps.py","size":39954,"sha256":"ecb6e918a81e489f5a5d7e1922ba5129457a4cfcaadced2f40c387d1dff43fea","public":"account","lines":806,"redactions":[{"line":57,"kind":"internal host"}],"kit_sha256":"cadd68dc87061a6c3fd215cde6b4bf7952f0fb1a46753eee926be3165834f892"},{"path":"rebuild.json","size":1486,"sha256":"b980633359e00d0bde199e3042c2d875446b103e8a25198ce26760229eaa1da1","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/metabase/v0.64.3.5-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":18,"bytes":246682954},"docs":{"files":19464,"bytes":387177938},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":149953,"bytes":2994253979}},"links":{"page":"https://readystack.dev/products/metabase/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fmetabase%2Frecipe","kit":"https://readystack.dev/buy.html?product=metabase"}}