{"slug":"rancher","tag":"v2.15.2-CE-ubuntu24.04-r3","current":true,"account":false,"tarball":"ReadyStack-rancher-v2.15.2-CE-ubuntu24.04-r3.tar.gz","tarball_sha256":"ebdabc589ced7590f76e2e7d86698747e4488cc31adf2290e6d94ed21b091a78","generated_at":"2026-10-29T19:23:31Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/rancher/rancher.git","ref":"v2.15.2","commit":"272e65580ca92b9dc51e0f0f0f9ae9d6d356e3b8","url":"https://github.com/rancher/rancher/tree/272e65580ca92b9dc51e0f0f0f9ae9d6d356e3b8"},"fetches":[{"kind":"git","url":"https://github.com/rancher/rancher.git","ref":"v2.15.2"},{"kind":"git","url":"https://github.com/k3s-io/containerd.git","ref":"\"$3\""},{"kind":"http","url":"https://releases.rancher.com/dashboard/v2.15.2.tar.gz"},{"kind":"http","url":"https://releases.rancher.com/api-ui/1.1.11.tar.gz"},{"kind":"http","url":"https://releases.rancher.com/kontainer-driver-metadata/release-v2.15/data.json"},{"kind":"http","url":"https://github.com/rancher/system-agent/releases/download/v0.15.2/install.sh"},{"kind":"http","url":"https://github.com/rancher/system-agent/releases/download/v0.15.2/system-agent-uninstall.sh"},{"kind":"http","url":"https://raw.githubusercontent.com/rancher/wins/v0.15.2/install.ps1"},{"kind":"http","url":"https://raw.githubusercontent.com/rancher/wins/v0.15.2/uninstall.ps1"},{"kind":"http","url":"https://github.com/rancher/"},{"kind":"http","url":"https://git.rancher.io/"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1790188871,"source_date_epoch_utc":"2026-09-23T18:41:11Z","target":{"image":"readystack/rancher:v2.15.2-CE-ubuntu24.04-r3","image_manifest_digest":"sha256:aa38564691e1e7e024b1da1c9258731cd61940cf1a04b6a6a79f878b28133d14","config_digest":"sha256:826fb040da1b1a929970a2248106c83c6dfac1c7228449474ef2b0373d8575f9"},"checksummed_files":110887},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":17263785,"sha256":"aab2c22d08f6ab80007ff43907e872c9017fd9d855e2dd5ad807bb10d658e794","public":"account","lines":110887},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":21654,"sha256":"254c592777d91b4e9690db4629d1e75f4346ab1bdac2760ea4500e685fd42b6e","public":"account","lines":308,"redactions":[{"line":22,"kind":"internal host"}],"kit_sha256":"3d3858b530ecd29d3895c76e277f4e21962b10516a83be43a5a160d43a433e07"},{"path":"Dockerfile.offline","size":21654,"sha256":"254c592777d91b4e9690db4629d1e75f4346ab1bdac2760ea4500e685fd42b6e","public":"account","lines":308,"redactions":[{"line":22,"kind":"internal host"}],"kit_sha256":"3d3858b530ecd29d3895c76e277f4e21962b10516a83be43a5a160d43a433e07"},{"path":"Dockerfile.offline.pinned","size":21654,"sha256":"254c592777d91b4e9690db4629d1e75f4346ab1bdac2760ea4500e685fd42b6e","public":"preview","lines":308,"redactions":[{"line":22,"kind":"internal host"}],"kit_sha256":"3d3858b530ecd29d3895c76e277f4e21962b10516a83be43a5a160d43a433e07","preview":{"text":"# =====================================================================\n# Rancher v2.15.2 L-009 HERMETIC OFFLINE BUILD — the canonical, attestation-producing build. build_kit runs\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <git-context>\n# Pinned-public-base + vendored model: golang 1.26.10 + ubuntu 24.04 pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock);\n# vendored/*-src are fully vendored Go trees (GOPROXY=off, -mod=vendor), every Go program in the image compiled here\n# on the one pinned Go; vendored/assets holds the checksummed non-Go inputs; vendored/debs is the apt closure.\n# Dockerfile and Dockerfile.offline are byte copies of this file (the repo-wide convention).\n#\n# SHAPE: upstream's single-container Rancher (\"docker run --privileged\"): the rancher server starts an embedded k3s\n# (server + agent, so containerd, runc and the CNI plugins run inside this container) and installs its system charts\n# into it. Same file layout, entrypoint and environment as upstream's package/Dockerfile `server` target, on Ubuntu,\n# but NON-ROOT: the image user is `rancher` (uid 1001) and rancher-entrypoint.sh runs upstream's entrypoint, Rancher and\n# k3s inside a rootlesskit user namespace (rancher-entrypoint.sh explains; --user 0 gives upstream's root mode).\n# =====================================================================\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS gobuild\n# libseccomp-dev for runc and k3s (both built with seccomp support, as upstream builds them), dpkg'd offline.\nRUN --mount=type=bind,source=vendored/builddebs,target=/tmp/builddebs dpkg -i /tmp/builddebs/*.deb\nENV GOTOOLCHAIN=local GOWORK=off GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off CGO_ENABLED=0\n# Fail closed on a stale toolchain: `go version <binary>` reads the toolchain recorded in the binary. gocheck ends every\n# compile RUN, and it also empties the Go build cache, so no stage's layer keeps its cache: with it, the twelve compile\n# stages' layers held well over 100 GB on the build host (<redacted: internal host> ran out of disk at build_kit, chain 618).\nRUN printf '%s\\n' '#!/bin/sh' 'set -eu' 'for b in \"$@\"; do v=$(go version \"$b\" | awk \"{print \\$2}\"); echo \"$b: $v\";' \\\n      '[ \"$(printf \"%s\\n%s\\n\" go1.26.10 \"$v\" | sort -V | head -n1)\" = go1.26.10 ] || { echo \"$b built with $v < go1.26.10\" >&2; exit 1; }; done' \\","lines_shown":24,"lines_total":308}},{"path":"Dockerfile.vendor","size":14663,"sha256":"77c5bf6ece5b025fe62a75d41f6ef70097bf48261451ef892b881f215297bcd7","public":"account","lines":188},{"path":"MANIFEST.txt","size":9723499,"sha256":"3fb0be945368e61cd3fe002ac18ec11616dbd6ab7c1702ef58d03944d61e83e8","public":"account","lines":110889},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"bb7b966631d80065f77b9168b8592fc3fbcf280c85f96bc60ade81bce2544de8","public":"full","lines":1,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/SOURCE_DATE_EPOCH.txt","text":"1790188871\n"},{"path":"TARGET_DIGEST.txt","size":301,"sha256":"ac5f22292c352e2a8c71ec544d11d4050d372acb14defa169359fab30445a8c6","public":"full","lines":7,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:aa38564691e1e7e024b1da1c9258731cd61940cf1a04b6a6a79f878b28133d14\nconfig_digest=sha256:826fb040da1b1a929970a2248106c83c6dfac1c7228449474ef2b0373d8575f9\ntag=readystack/rancher:v2.15.2-CE-ubuntu24.04-r3\nprobe_port=80\nprobe_path=/healthz\nprobe_timeout=900\nverify_privileged=1\n"},{"path":"VERIFY_OFFLINE.sh","size":8100,"sha256":"dc0b5cd5c104a5da5c3f4e379e8f3d2eeffa307c8545067925bb4317a722b0b7","public":"account","lines":138},{"path":"docs/PROVENANCE.md","size":1776,"sha256":"aa81e37b8e9a62467bd15bf218d0fb4d30126f8c04d5418da8225224fe1daaf8","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5102,"sha256":"b49a3e2bc33e6db58c7f3d363a070fd68f96b8a72ab5b0c11bad9880bf9c0037","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1963,"sha256":"a947fdd58f76456489c62b5a8d5333c5bb2baa70a614890f874fc17ad02b8fb5","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":73,"sha256":"697556f7ac6dd3deb282c9b61a1a7697a847b85ecb384e6df7aa594de51c1baf","public":"full","lines":2,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for rancher (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":4619,"sha256":"d3c6d1aef55eeb50e48373be0261367ca1811bb817d08b0b769d38c21e6e60c9","public":"account","lines":150},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":652,"sha256":"8549597805978aafbea04fe0e7de8e89013826212e28a06dcd7a6606503ac768","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":193130,"sha256":"6c1f0359bb31d45c9e8e1dfdb80e432e63c8e3b059517c1eab60d01f7b219e29","public":"account","lines":3039},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":310,"sha256":"5028a31e598befc831efbc2c09e99e37de4a9fd787839f6d72c6139f02878d31","public":"full","lines":9,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"rancher\",\n  \"repo\": \"https://github.com/rancher/rancher.git\",\n  \"ref\": \"v2.15.2\",\n  \"commit\": \"272e65580ca92b9dc51e0f0f0f9ae9d6d356e3b8\",\n  \"tree_listing_sha256\": \"b6b40d830eb3a7e3139c60f9e69eb2da409082e6c9827bc6546926e997940e72\",\n  \"file_count\": 3032\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":217,"sha256":"853301e7237b14dd66fe64e6811696d21ca01109b71377a487750810ecf6671b","public":"account","lines":26},{"path":"docs/provenance/TOOLCHAIN.lock","size":6646,"sha256":"f12b07aed50ccb0afb0e13ef2b4a067dcf13667a76ee368f0f60925ccff9e2a2","public":"account","lines":214},{"path":"go-floors.sh","size":3343,"sha256":"9a29a96398903b2f5f08ee88559e378716b3da78af23db43dc0aef375a83cf6e","public":"account","lines":55},{"path":"jailer.sh","size":4208,"sha256":"2747465fbf4ba830d42dc8622d3499a066195dcd265248e60e3460f8ec897790","public":"account","lines":93},{"path":"kubectl-userns.sh","size":760,"sha256":"e8e26e456718ce5b43683957b307a040ceefad7e5c855c63a92391f9997747d2","public":"account","lines":10},{"path":"rancher-entrypoint.sh","size":3686,"sha256":"14939e1e47486019840b377fd8b7a053cdff05c95282895a4b3ea659d1f963dc","public":"account","lines":55},{"path":"rancher-webhook-guard.sh","size":2637,"sha256":"8ec3533a62e5261e2c8acc3a6527cbb11c7c5c1e138b3ec331c8e2d99298134d","public":"account","lines":35,"redactions":[{"line":15,"kind":"internal host"}],"kit_sha256":"d0ac6904e0e0df165b40794d38150cba687699edf51ee9e4c0c1d9b7430d8c75"},{"path":"rebuild.json","size":1436,"sha256":"e3254e3071758f671ea2a8c75ab13ef3a9616ea6f5c11d9087462463058a8c83","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/rancher/v2.15.2-CE-ubuntu24.04-r3/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":3088,"bytes":30118338},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":107755,"bytes":2054336793}},"links":{"page":"https://readystack.dev/products/rancher/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Francher%2Frecipe","kit":"https://readystack.dev/buy.html?product=rancher"}}