{"slug":"traefik","tag":"v3.7.16-CE-ubuntu24.04-r1","current":true,"account":false,"tarball":"ReadyStack-traefik-v3.7.16-CE-ubuntu24.04-r1.tar.gz","tarball_sha256":"acbd117b2a447521083de12e71f781967f45022978326e732935067af22683dc","generated_at":"2026-10-29T19:45:08Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/traefik/traefik","ref":"v3.7.16","commit":"af6d927c51191ae1df104aaf907793386b816c28","url":"https://github.com/traefik/traefik/tree/af6d927c51191ae1df104aaf907793386b816c28"},"fetches":[{"kind":"git","url":"https://github.com/traefik/traefik","ref":"v3.7.16"}],"bases":[{"image":"golang:1.26.10-bookworm","digest":"sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af"]},"build_method":"source-rebuild-go","source_date_epoch":1792485846,"source_date_epoch_utc":"2026-10-20T08:44:06Z","target":{"image":"readystack/traefik:v3.7.16-CE-ubuntu24.04-r1","image_manifest_digest":"sha256:f3d711110aab6de0a6062da2f35c31b3b3d18bc0b9eadbc95c03dff9ec7bbd81","config_digest":"sha256:2094696a5754be12f42fcb3022aac8e878fed74a0fe24a05a5e42c51a2a7b945"},"checksummed_files":24556},"files":[{"path":"BASES.tsv","size":264,"sha256":"8d72027e2bc448d0c7ff3a900bfe648f1e4c9ec92a2beaa3f623ccffc48641b5","public":"full","lines":2,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/BASES.tsv","text":"golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af\tbases/golang_1.26.10-bookworm_632dff735179.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":3826931,"sha256":"78d6861498780333eb183183aab23cad486a395e7ddbc5752dd03699d6af71be","public":"account","lines":24556},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":4662,"sha256":"b679b5d36505b5bd75b285c4f7236b25d98615bd072c1b09930886e8df8109da","public":"account","lines":63},{"path":"Dockerfile.offline","size":4662,"sha256":"b679b5d36505b5bd75b285c4f7236b25d98615bd072c1b09930886e8df8109da","public":"account","lines":63},{"path":"Dockerfile.offline.pinned","size":5224,"sha256":"4c910e81d450641277bf2cb7794155406d0bebad553560032f70397f6b655cd5","public":"preview","lines":71,"preview":{"text":"# =====================================================================\n# L-009 HERMETIC OFFLINE BUILD (traefik) — the canonical, attestation-\n# producing build. Run by build_kit's L-009 buildx:\n#   docker buildx build --builder readystack-builder-max --network=none\n#     --attest type=provenance,mode=max --attest type=sbom --push <git-context>\n# That command CREATES the DockerHub image WITH SBOM + SLSA-max provenance.\n#\n# Pinned-public-base + vendored model (the container builder can't see host\n# images, so everything is vendored):\n#   - golang 1.26.10 + ubuntu pinned BY DIGEST (BASE_IMAGE_DIGESTS.lock; RUN steps\n#     are --network=none hermetic)\n#   - vendored/traefik-src : fully-vendored Go tree + prebuilt webui/static\n#                            (GOPROXY=off, -mod=vendor)\n#   - vendored/debs        : apt CVE-upgrade closure + runtime pkgs, dpkg offline\n# =====================================================================\nFROM golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af AS build\nWORKDIR /src\nCOPY vendored/traefik-src/ .\nENV CGO_ENABLED=0 GOTOOLCHAIN=local GOFLAGS=\"-mod=vendor -buildvcs=false\" GOPROXY=off\nRUN go build -trimpath -ldflags='-s -w -X github.com/traefik/traefik/v3/pkg/version.Version=3.7.16' \\\n      -o /traefik ./cmd/traefik\n# Fail closed on a stale toolchain. The digest this kit used to pin under golang:1.26-bookworm\n# was go1.26.4 (published 2026-06-11) long after the tag had moved on, so chain 491 shipped\n# stdlib 1.26.4 with 7 fixable critical/high (fixed in 1.26.6). `go version <binary>` reads the","lines_shown":24,"lines_total":71}},{"path":"Dockerfile.vendor","size":4755,"sha256":"38cc885fc97e87b55821e065e850cf527196cb6c6277f29e3e8fe2e4a611adc2","public":"account","lines":76},{"path":"MANIFEST.txt","size":2157153,"sha256":"dbff082fc90df86de473e00f61bded4491a7bf039dcb5d9d3c6d23b584793fb2","public":"account","lines":24558},{"path":"README.md","size":2023,"sha256":"e347d51a1721c1ae8aee9a425150e861d9ce7a20612e4c9982c4865e9d5b731e","public":"account","lines":29},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"2b1d9b5bca277b75769219296f58e2ebd02364b624d2f7eafd0d07f9b5eb5ec5","public":"full","lines":1,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/SOURCE_DATE_EPOCH.txt","text":"1792485846\n"},{"path":"TARGET_DIGEST.txt","size":280,"sha256":"51cf70998d17e1ed213568aa1f196f02269af3dff78f68abd08e6a6246032172","public":"full","lines":6,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:f3d711110aab6de0a6062da2f35c31b3b3d18bc0b9eadbc95c03dff9ec7bbd81\nconfig_digest=sha256:2094696a5754be12f42fcb3022aac8e878fed74a0fe24a05a5e42c51a2a7b945\ntag=readystack/traefik:v3.7.16-CE-ubuntu24.04-r1\nprobe_port=8080\nprobe_path=/ping\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":10153,"sha256":"3e8184ea230cfd8f41f977e26be6bf7bd03112c396c517837ce0c7de4f7399dd","public":"account","lines":165},{"path":"docs/PROVENANCE.md","size":1772,"sha256":"71feec97ac6886d52c0055dca56ca2f66edb58cfdee1f27af6d176ca1182b763","public":"account","lines":28},{"path":"docs/REBUILD.md","size":5103,"sha256":"6cf8b3e1e3206c97b8964f24305aaee6725d87d3deda306c7f5b3a8d0f66a010","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1963,"sha256":"75bb925ff3a868bbdf5bd80f70f7da30e86712bf5044ca7c39233a2c71290fdb","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":73,"sha256":"43f4291c546a0f27508c8b9b012f0a53519172df8b0442d2f4bbcc4eec872e15","public":"full","lines":2,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for traefik (resolve at build_kit)\ngolang:1.26.10-bookworm\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":1242,"sha256":"3471c335cd82b6cfc5ac5cead9b05f81379987c74ffab742f2a5d79f3eea1067","public":"account","lines":33},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":648,"sha256":"222a6ba44953b67fb7d13c749327200fdc38b72709af1620a849a6a93901957a","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":142724,"sha256":"f2d2f7c0cea4937cb19f419865e478118bc79f7ae015f968a16ccf2294b94b0e","public":"account","lines":2322},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":306,"sha256":"75c4414d1635cb29c740f2e6c9f131ee9960b61400945f422eb9967c78d35572","public":"full","lines":9,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"traefik\",\n  \"repo\": \"https://github.com/traefik/traefik\",\n  \"ref\": \"v3.7.16\",\n  \"commit\": \"af6d927c51191ae1df104aaf907793386b816c28\",\n  \"tree_listing_sha256\": \"47bf9e2bfc3237b9d3edd57de2047bff49ea16cff38ac79dfb1a834eb15246a8\",\n  \"file_count\": 2315\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":40,"sha256":"d9e8e7dec1288b76924f19ddf5b6d4ea56dfd43170ac136f6f9d97e569398b3c","public":"account","lines":4},{"path":"docs/provenance/TOOLCHAIN.lock","size":3808,"sha256":"7be0df1fae54f3b2af019e64b908ef2d7cfe2e4b63d6c8a4debd096d5279b54d","public":"account","lines":77},{"path":"rebuild.json","size":1435,"sha256":"1289ecaa65b7c48d5f316eca2ed94ab9bf3152ae70d65d2ae404508d98c7db72","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/traefik/v3.7.16-CE-ubuntu24.04-r1/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"},{"path":"traefik-dynamic.yml","size":555,"sha256":"ff2ec627b1ccf81ac1abc902dc7cb50630e06adf8404e4df4f26d8abe9a9dbc2","public":"account","lines":8}],"skipped":[],"kit_adds":{"bases":{"files":16,"bytes":326583068},"docs":{"files":2368,"bytes":36731094},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":22147,"bytes":219195163}},"links":{"page":"https://readystack.dev/products/traefik/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Ftraefik%2Frecipe","kit":"https://readystack.dev/buy.html?product=traefik"}}