{"slug":"nats","tag":"v2.15.2-CE-ubuntu24.04-r2","current":true,"account":false,"tarball":"ReadyStack-nats-v2.15.2-CE-ubuntu24.04-r2.tar.gz","tarball_sha256":"afe21ed2b0b60861468c67eb0a007fb4284ce2f86bd277a9f1a25a06c4163a59","generated_at":"2026-10-29T19:17:09Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/nats-io/nats-server","ref":"v2.15.2","commit":"5a815f11a911efa2c88fd1dbfb18ed89a449bfc1","url":"https://github.com/nats-io/nats-server/tree/5a815f11a911efa2c88fd1dbfb18ed89a449bfc1"},"fetches":[{"kind":"git","url":"https://github.com/nats-io/nats-server","ref":"v2.15.2"},{"kind":"http","url":"https://github.com/canonical/chisel/releases/download/v1.5.1/chisel_v1.5.1_linux_amd64.tar.gz"},{"kind":"http","url":"https://github.com/canonical/chisel-releases/archive/f2600d3aa90123db6d44bb1441a99afc8b5847d9.tar.gz"}],"bases":[{"image":"golang:1.27.3-bookworm","digest":"sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5"]},"build_method":"source-rebuild-go","source_date_epoch":1793028235,"source_date_epoch_utc":"2026-10-26T15:23:55Z","target":{"image":"readystack/nats:v2.15.2-CE-ubuntu24.04-r2","image_manifest_digest":"sha256:ed77bffbe5e2c9ab2740c0a09f618e1f6b62371a91523126bd975fa118dfbf02","config_digest":"sha256:21ad6a6e0cef48a353861486c53975e42908a5e74d633da1c8bdc77e9ba3de44"},"checksummed_files":2009},"files":[{"path":"BASES.tsv","size":262,"sha256":"203db39d31165cdf0ef7de9050461c107d9b50e5f22ecc1739a0ecbc33f89b79","public":"full","lines":2,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/BASES.tsv","text":"golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5\tbases/golang_1.27.3-bookworm_972b4110ba0f.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":259398,"sha256":"975ddbf21342ae20b5e896cc853e3e8d7b5329d3588b6177967504bcfce2d89d","public":"account","lines":2009},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":4690,"sha256":"97df5bcf81c3b07ae28e64cc5acf3c35d22d845a7cb0e3d615ba9d36a3bb9b99","public":"account","lines":56},{"path":"Dockerfile.offline","size":4690,"sha256":"97df5bcf81c3b07ae28e64cc5acf3c35d22d845a7cb0e3d615ba9d36a3bb9b99","public":"account","lines":56},{"path":"Dockerfile.offline.pinned","size":4690,"sha256":"97df5bcf81c3b07ae28e64cc5acf3c35d22d845a7cb0e3d615ba9d36a3bb9b99","public":"preview","lines":56,"preview":{"text":"# GENERATED L-009 hermetic build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Go tree + debs from Dockerfile.vendor.\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS build_nats-server\nWORKDIR /src\nCOPY vendored/nats-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1793028235\nRUN go build -trimpath -ldflags='-w -X github.com/nats-io/nats-server/v2/server.gitCommit=5a815f1 -X github.com/nats-io/nats-server/v2/server.serverVersion=v2.15.2' -o /nats-server . && /nats-server --version > /tmp/nats-server.version 2>&1; cat /tmp/nats-server.version; grep -qF 'nats-server: v2.15.2' /tmp/nats-server.version || { echo 'nats-server --version does not report nats-server: v2.15.2'; exit 1; } && \\\n    { readelf -lW /nats-server | sed -n 's/.*Requesting program interpreter: \\(.*\\)]$/\\1/p'; readelf -dW /nats-server | sed -n 's/.*Shared library: \\[\\(.*\\)\\]$/\\1/p'; } > /nats-server.needs\n# rs-probe: the HEALTHCHECK helper (standard library only, from the kit's rs-probe.go)\nFROM golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 AS build_rs_probe\nWORKDIR /probe\nCOPY rs-probe.go main.go\nCOPY rs-probe.mod go.mod\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=\"-buildvcs=false\" GOPROXY=off SOURCE_DATE_EPOCH=1793028235\nRUN go build -trimpath -ldflags='-s -w' -o /rs-probe .\n# the chiselled rootfs (vendored/chisel, cut by Dockerfile.vendor), the service user, the binaries\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c AS rootfs\nARG SOURCE_DATE_EPOCH=1793028235\nADD vendored/chisel/rootfs.tar /rootfs/\nRUN printf 'nats:x:999:999::/var/lib/nats:/bin/sh\\n' >> /rootfs/etc/passwd && printf 'nats:x:999:\\n' >> /rootfs/etc/group && \\\n    mkdir -p /rootfs/var/lib/nats /rootfs/data && chown -R 999:999 /rootfs/var/lib/nats /rootfs/data\nCOPY --from=build_nats-server /nats-server /rootfs/usr/bin/nats-server\nCOPY --from=build_nats-server /nats-server.needs /tmp/needs/nats-server\nCOPY --from=build_rs_probe /rs-probe /rootfs/usr/local/bin/rs-probe","lines_shown":24,"lines_total":56}},{"path":"Dockerfile.vendor","size":4248,"sha256":"de52486bab5084ccdaeecd4d1624a8cb06d8cceea71deb7575e96548ebf8bffc","public":"account","lines":34},{"path":"MANIFEST.txt","size":122816,"sha256":"addcf71d914b7a53568f66393ebc7e20cdd7d63ac17b5d34a1ff0104d0be093d","public":"account","lines":2011},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"0f39174a54ffd9b4dbdb6d5ca976278aea9edf7594290d21660f2c7b4ed2f3de","public":"full","lines":1,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/SOURCE_DATE_EPOCH.txt","text":"1793028235\n"},{"path":"TARGET_DIGEST.txt","size":308,"sha256":"5b957206cf5ca9e12d130149c757050659780d5a89d070a4bc00d722ee0fff45","public":"full","lines":7,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:ed77bffbe5e2c9ab2740c0a09f618e1f6b62371a91523126bd975fa118dfbf02\nconfig_digest=sha256:21ad6a6e0cef48a353861486c53975e42908a5e74d633da1c8bdc77e9ba3de44\ntag=readystack/nats:v2.15.2-CE-ubuntu24.04-r2\nprobe_port=8222\nprobe_path=/healthz\nprobe_timeout=180\nverify_secret=NATS_PASSWORD\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":1767,"sha256":"131ce485563334f404028916947cc43d99fd524d81dfe17e5837eada2fe7c7eb","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5081,"sha256":"b76f168aceac84b8c3baec98a73b41e2c3b269255f3c5d577c7c07f0951e519f","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1945,"sha256":"ab5cdd209b641830db215a124963d3b4374990f7246227a6616a7bc5495d68da","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":69,"sha256":"273f709fa19fcddaf034f46ff244ce068c3fc1a97700d0bdb4fce1d552fde8c4","public":"full","lines":2,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for nats (resolve at build_kit)\ngolang:1.27.3-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":2850,"sha256":"646f6c7ebe1c218334525354579a33b8e77963019ac5ed6054eb1c21c12399cd","public":"account","lines":44},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":649,"sha256":"e118e6bbef69f0601a84fca5ca84c3ec82c54ee735a9bbf6ca7636a016582799","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":24607,"sha256":"864b3398b61cd341d855c053dd2e4d38ea8a7504b3d39d539500ae5b8146f021","public":"account","lines":605},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":306,"sha256":"29581605ab796054cf7b432de803a8db9a242d92d2550bfce823fe781e6b3f04","public":"full","lines":9,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"nats\",\n  \"repo\": \"https://github.com/nats-io/nats-server\",\n  \"ref\": \"v2.15.2\",\n  \"commit\": \"5a815f11a911efa2c88fd1dbfb18ed89a449bfc1\",\n  \"tree_listing_sha256\": \"5b9cc2ec65654263c7b6900c150bd7fcbc5496b880f245a3d82459e96b491718\",\n  \"file_count\": 598\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":28,"sha256":"fa091140511e85f86057bf9f05d5bd9e073f13c04af3de77559c304bd4b38227","public":"account","lines":3},{"path":"docs/provenance/TOOLCHAIN.lock","size":2047,"sha256":"e7f088d592503070bed6f73f3212cfc1c280a3ecacd4127b106ed3df25ec7f3d","public":"account","lines":63},{"path":"nats-server.conf","size":857,"sha256":"fb002d937e314d4baafa2233e52e5e54b961b2968c45cabc420d818c280dc10d","public":"account","lines":18},{"path":"readystack-entrypoint.sh","size":1693,"sha256":"58468a1384ce9b2f6c365b6833610d943aae72fb9fa7ad890d970596ac0c71d4","public":"account","lines":30},{"path":"rebuild.json","size":1479,"sha256":"ee4c0793dd1e41a5d18119df48bb3a477e5db4bc17e693956c4d438dd1f5e0fd","public":"account","lines":41},{"path":"rs-probe.go","size":3179,"sha256":"a8bdee17a3581f8685f58d7a8ccb7524153829f70b19c9d75e323c589de2ad8f","public":"account","lines":117},{"path":"rs-probe.mod","size":40,"sha256":"a480b79acf98e4275725058076ad2a8684a2eee06c27f4337b75339c198ca92d","public":"account","lines":3},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/nats/v2.15.2-CE-ubuntu24.04-r2/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":330381419},"docs":{"files":654,"bytes":15266230},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":1312,"bytes":51651022}},"links":{"page":"https://readystack.dev/products/nats/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fnats%2Frecipe","kit":"https://readystack.dev/buy.html?product=nats"}}