{"slug":"superset","tag":"6.1.0-CE-ubuntu24.04-r3","current":true,"account":false,"tarball":"ReadyStack-superset-6.1.0-CE-ubuntu24.04-r3.tar.gz","tarball_sha256":"49c6dc73a80c41c0af52eb42f5717b2069e9181e42de13af561a7d65f9dad294","generated_at":"2026-10-29T19:24:18Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/apache/superset","ref":"6.1.0","commit":"c83fb2bb1dcfac41ac51bcebd82471f4a7180d18","url":"https://github.com/apache/superset/tree/c83fb2bb1dcfac41ac51bcebd82471f4a7180d18"},"fetches":[{"kind":"git","url":"https://github.com/apache/superset","ref":"6.1.0"},{"kind":"http","url":"https://www.python.org/ftp/python/3.12.15/Python-3.12.15.tar.xz"}],"bases":[{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0"},"build_method":"source-rebuild-python","source_date_epoch":1777640555,"source_date_epoch_utc":"2026-05-01T13:02:35Z","target":{"image":"readystack/superset:6.1.0-CE-ubuntu24.04-r3","image_manifest_digest":"sha256:fd2c79e95d1ed0767a0c89f0a7de674bc93481c522d49ee1e5fea57731e32c69","config_digest":"sha256:1bad4382ce821bf0737dc8b031285f4a22a8568af1b41a322eed660d0ce50d8d"},"checksummed_files":15331},"files":[{"path":"BASES.tsv","size":121,"sha256":"0da49a3ea98fcaa345080b1a4230d2c798b395f71854063c2af657eb53a8a2e0","public":"full","lines":1,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/BASES.tsv","text":"ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":2432658,"sha256":"afb714441e7f082f5149addb36ca6603d68d63bdfde748fad4a345b9300b5ae3","public":"account","lines":15331},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":7838,"sha256":"77ce92c718217d415ad902b00d79571d51a80dda0d8322ae8f189f3a79a830b1","public":"account","lines":72},{"path":"Dockerfile.offline","size":7838,"sha256":"77ce92c718217d415ad902b00d79571d51a80dda0d8322ae8f189f3a79a830b1","public":"account","lines":72},{"path":"Dockerfile.offline.pinned","size":7838,"sha256":"77ce92c718217d415ad902b00d79571d51a80dda0d8322ae8f189f3a79a830b1","public":"preview","lines":72,"preview":{"text":"# GENERATED L-009 hermetic Python build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned base from BASE_IMAGE_DIGESTS.lock; vendored wheelhouse + source + debs from Dockerfile.vendor.\n# pydeps sub-stage installs the wheelhouse offline; COPY /deps /usr/local keeps pip OUT of the runtime SBOM.\n# CPython 3.12.15 COMPILED HERE, offline, from python.org's tarball (sha256 re-checked) and the vendored\n# build debs, by the same command the vendor stage ran; linked against Ubuntu's libraries (debs the scan\n# sees, apt fixes). The runtime takes /usr/local from this stage and none of the toolchain.\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c AS cpython\nARG SOURCE_DATE_EPOCH=1777640555\nENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}\nCOPY vendored/python/debs/ /tmp/cpython-debs/\nCOPY vendored/python/Python-3.12.15.tar.xz /tmp/Python-3.12.15.tar.xz\nRUN set --; for f in /tmp/cpython-debs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; } && \\\n    : \"${SOURCE_DATE_EPOCH:?the CPython build needs SOURCE_DATE_EPOCH}\" && \\\n    echo \"c2c4321961fab0fb999d66e0cecf521c2ab3994c7992873ea99e306c1094fd5a  /tmp/Python-3.12.15.tar.xz\" | sha256sum -c - && \\\n    mkdir -p /usr/src/python && tar -xJf /tmp/Python-3.12.15.tar.xz -C /usr/src/python --strip-components=1 --no-same-owner && \\\n    rm -rf /tmp/cpython-debs /tmp/Python-3.12.15.tar.xz && cd /usr/src/python && \\\n    export DEB_BUILD_MAINT_OPTIONS=optimize=-lto && \\\n    PYCF=\"$(dpkg-buildflags --get CFLAGS) $(dpkg-buildflags --get CPPFLAGS)\" && PYLD=\"$(dpkg-buildflags --get LDFLAGS)\" && \\\n    ./configure --build=x86_64-linux-gnu --prefix=/usr/local --enable-shared --enable-loadable-sqlite-extensions --enable-option-checking=fatal --disable-test-modules --without-static-libpython --with-ensurepip=install --with-system-expat --without-system-libmpdec --with-dbmliborder= py_cv_module__dbm=n/a py_cv_module__gdbm=n/a py_cv_module__tkinter=n/a && \\\n    make -j\"$(nproc)\" \"EXTRA_CFLAGS=$PYCF\" \"LDFLAGS=$PYLD,--strip-all\" && \\","lines_shown":24,"lines_total":72}},{"path":"Dockerfile.vendor","size":14587,"sha256":"2c7d3664071f373e6a962b8962249d8afba5371def5d17d7ff2b95ad1f78bc83","public":"account","lines":79},{"path":"MANIFEST.txt","size":1390180,"sha256":"b7c3a7422743b617610ad03baefbf3f963179f0b81e8ca48f26c566fd2d8d047","public":"account","lines":15333},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"981beb814a01b3e755bf700f83c4a8c0d9b8dc4aa2f7b127e15046a82109107e","public":"full","lines":1,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/SOURCE_DATE_EPOCH.txt","text":"1777640555\n"},{"path":"TARGET_DIGEST.txt","size":428,"sha256":"e9bb61e038ad3fc1d0d22cd4ee6351c0a140e63fadf00761482f9701a6946e64","public":"full","lines":8,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:fd2c79e95d1ed0767a0c89f0a7de674bc93481c522d49ee1e5fea57731e32c69\nconfig_digest=sha256:1bad4382ce821bf0737dc8b031285f4a22a8568af1b41a322eed660d0ce50d8d\ntag=readystack/superset:6.1.0-CE-ubuntu24.04-r3\nprobe_port=8088\nprobe_path=/health\nprobe_timeout=900\nverify_boot=skip\nverify_boot_reason=this image needs db (not part of this archive); boot it with your own services as the admin handbook describes\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":2013,"sha256":"5711b716a0c83f807534db93feb2383bc2ed7efcfb973f9580f88fb52b331c73","public":"account","lines":29},{"path":"docs/REBUILD.md","size":5167,"sha256":"5579c3abd9f3b6f5fe051a4a12df8b01d33462beeae280b92a7a64f21190bd7d","public":"account","lines":59},{"path":"docs/VERIFY.md","size":1966,"sha256":"cac62c74d8b2ca76dbcde15e9f0c0e08ecdcfc1263b6fb1f6860ba6a6235a248","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":51,"sha256":"66963822f18a7780c270e74f27dd25bafac076f13b073c0f546cbce133c7a968","public":"full","lines":2,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for superset (resolve at build_kit)\n\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":12113,"sha256":"0777b56616ab72bc5569c62a8fe9b5265f1eea9c08fbfb5f6c8cd34e8425b170","public":"account","lines":216},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":647,"sha256":"dad7e81af7996245a27934a7aaf83e565a42c909d7f46bd23d4ca141d62994bf","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":391778,"sha256":"f571f368454af977d1f4ad4d79055686eea25724bbc0b5d3f4e9d30e00429917","public":"account","lines":5007},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":305,"sha256":"076be5060bc9b8c382534f0c2210457be1f72ca63e046e10e995d6d502c57845","public":"full","lines":9,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"superset\",\n  \"repo\": \"https://github.com/apache/superset\",\n  \"ref\": \"6.1.0\",\n  \"commit\": \"c83fb2bb1dcfac41ac51bcebd82471f4a7180d18\",\n  \"tree_listing_sha256\": \"33f51912dbfeb76ed01a8c9bf599cc0c10ff67821868c648e64c0fdf32737ae9\",\n  \"file_count\": 7493\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":35,"sha256":"3eac9630c32657bb285f21d8f1587bb69044483b83f4821b1b88faf8bc18af65","public":"account","lines":4},{"path":"docs/provenance/TOOLCHAIN.lock","size":12474,"sha256":"761a90299ee52663ed9267286310add335d6587440279331bad0d44a748e96dd","public":"account","lines":317},{"path":"kitforge-wheel-overrides.json","size":395,"sha256":"1c70ab243812bcba4924cf0af3e183801c8a74668ae81eb098cd434f4484ccba","public":"account","lines":15},{"path":"kitforge-wheelmeta.py","size":7950,"sha256":"eeaaffa400dbc6cb20270c334dae691e5334edd48ce3798d489c6dc3ae968217","public":"account","lines":151},{"path":"rebuild.json","size":1213,"sha256":"c59232fdde903bf1826bda6cdf4d4c899cf582f3fd88ae2526d5eadb9a585f35","public":"account","lines":31},{"path":"superset-entrypoint.sh","size":1925,"sha256":"190cd77dcf6d98ee97733c7b7de2d29a5f49509581378849270789825b4b3c91","public":"account","lines":40,"redactions":[{"line":12,"kind":"credentials in a URL"}],"kit_sha256":"e60183d264500b56a415f1aa6681e628a10b8196ee7beced8b2dc11c1676bbaa"},{"path":"superset_config.py","size":681,"sha256":"f0fecc4bc9f99c6bf4d4821b1fd92f8397288d8edad635d492910b59284a22c4","public":"account","lines":10},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/superset/6.1.0-CE-ubuntu24.04-r3/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":5,"bytes":29771169},"docs":{"files":7547,"bytes":253783501},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":7752,"bytes":614339271}},"links":{"page":"https://readystack.dev/products/superset/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fsuperset%2Frecipe","kit":"https://readystack.dev/buy.html?product=superset"}}