{"slug":"vaultwarden","tag":"1.37.4-CE-ubuntu24.04-r4","current":true,"account":false,"tarball":"ReadyStack-vaultwarden-1.37.4-CE-ubuntu24.04-r4.tar.gz","tarball_sha256":"ada1d15400dd3000ff5a81b89e185d185a9b1e30b465e5c6dac566bea694698e","generated_at":"2026-10-29T19:25:28Z","dockerfile":"Dockerfile.offline.pinned","build_script":"BUILD_OFFLINE.sh","pins":{"upstream":{"repo":"https://github.com/dani-garcia/vaultwarden","ref":"1.37.4","commit":"7c188967e7a467b19b2757bc3326f9cf3ccae327","url":"https://github.com/dani-garcia/vaultwarden/tree/7c188967e7a467b19b2757bc3326f9cf3ccae327"},"fetches":[{"kind":"git","url":"https://github.com/dani-garcia/vaultwarden","ref":"1.37.4"},{"kind":"http","url":"https://github.com/dani-garcia/bw_web_builds/releases/download/v2026.7.0/bw_web_v2026.7.0.tar.gz"}],"bases":[{"image":"rust:1.99.0-bookworm","digest":"sha256:114c7a4425406451c2866b6aafe69fe29b1b298832db1277d411ac73c82d04d6"},{"image":"ubuntu:24.04","digest":"sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"}],"toolchain":{"buildkit":"moby/buildkit:v0.31.2","buildkit_image_digest":"sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0","builder_images":["ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c"]},"build_method":"source-rebuild-rust","source_date_epoch":1791203961,"source_date_epoch_utc":"2026-10-05T12:39:21Z","target":{"image":"readystack/vaultwarden:1.37.4-CE-ubuntu24.04-r4","image_manifest_digest":"sha256:5a333ebba93eb24b0fd0812ca9f7fe5728b9f7b5c383fa6edc13fe217c6d323f","config_digest":"sha256:6b5dc6677ebc3abf90edcfa35756fc6255cec7e4246f427b3ee2de21d1bbc13e"},"checksummed_files":36612},"files":[{"path":"BASES.tsv","size":258,"sha256":"a7115692efea7c2294d63c25c9fced9e7d5477ac54a97533f2181da3f5d35952","public":"full","lines":2,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/BASES.tsv","text":"rust:1.99.0-bookworm@sha256:114c7a4425406451c2866b6aafe69fe29b1b298832db1277d411ac73c82d04d6\tbases/rust_1.99.0-bookworm_114c7a442540.oci\nubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c\tbases/ubuntu_24.04_24737cef17f4.oci\n"},{"path":"BUILD_OFFLINE.sh","size":6738,"sha256":"83299978ccd02a0b69e163d760da1211b401bbfa35a3184ca674dc37ff876732","public":"preview","lines":125,"preview":{"text":"#!/usr/bin/env bash\n# =============================================================================\n# ReadyStack — offline reproducible rebuild.\n#\n# Rebuilds this product's image from THIS ARCHIVE ALONE, with no network access\n# of any kind, and prints the resulting linux/amd64 image-manifest digest.\n# Run ./VERIFY_OFFLINE.sh afterwards to assert it equals the published digest.\n#\n# Requirements: linux/amd64 Docker host, docker buildx >= 0.30, jq, tar.\n# No git, no registry access, no additional tooling.\n#\n#   ./BUILD_OFFLINE.sh                the rebuild (OCI image + a docker-loadable copy)\n#   ./BUILD_OFFLINE.sh --provenance   the same rebuild with SLSA v1 build provenance (mode=max) attached to the OCI\n#                                     image, generated by BuildKit, not by any build step. Run on your own hardened,\n#                                     isolated build platform and sign that provenance with a key the build cannot\n#                                     reach, and the result meets SLSA Build Level 3 (see REBUILD.md). The image\n#                                     digest is the same either way.\n# =============================================================================\nset -euo pipefail\nPROVENANCE=0\nfor arg in \"$@\"; do\n  case \"$arg\" in\n    --provenance) PROVENANCE=1 ;;\n    -h|--help) sed -n '2,20p' \"$0\"; exit 0 ;;","lines_shown":24,"lines_total":125}},{"path":"CHECKSUMS.sha256","size":5230391,"sha256":"1a347c9b44d500b02c7593db1ea1e306749ea7d0a8fa581f361c77ad3cf5575e","public":"account","lines":36612},{"path":"DOCKERFILE_NAME.txt","size":26,"sha256":"9aadd1ede68e016a6f163c97befc5ff2fcdc8ebd4f84b108dba63cb195fa8c84","public":"full","lines":1,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/DOCKERFILE_NAME.txt","text":"Dockerfile.offline.pinned\n"},{"path":"Dockerfile","size":5316,"sha256":"4f33cc0e31bbcdf0c7c2c907147565c9215d1619f1977cc99ee5c9ce6a15bfba","public":"account","lines":55},{"path":"Dockerfile.offline","size":5316,"sha256":"4f33cc0e31bbcdf0c7c2c907147565c9215d1619f1977cc99ee5c9ce6a15bfba","public":"account","lines":55},{"path":"Dockerfile.offline.pinned","size":5316,"sha256":"4f33cc0e31bbcdf0c7c2c907147565c9215d1619f1977cc99ee5c9ce6a15bfba","public":"preview","lines":55,"preview":{"text":"# GENERATED L-009 hermetic Rust build (--network=none, SBOM+SLSA-attestation-producing).\n# Pinned bases from BASE_IMAGE_DIGESTS.lock; vendored Cargo tree + web-vault + debs from Dockerfile.vendor.\n# The upstream Rust toolchain (rustup's portable x86_64-unknown-linux-gnu dist) from the pinned official\n# image; the build stage below is ubuntu:24.04 and links against that distro's own libraries.\nFROM rust:1.99.0-bookworm@sha256:114c7a4425406451c2866b6aafe69fe29b1b298832db1277d411ac73c82d04d6 AS rusttoolchain\nFROM ubuntu:24.04@sha256:24737cef17f4e22b1977df7d9a05e77c4e28b7da5b8911f8d8ccda136bf3573c AS build_vaultwarden\n# build-stage tools (strategy.build_packages) installed offline from the\n# vendored deb closure — build.rs helpers like protoc live here.\nRUN --mount=type=bind,source=vendored/build-debs,target=/tmp/bdebs \\\n    set --; for f in /tmp/bdebs/*.deb; do [ -e \"$f\" ] && set -- \"$@\" \"$f\"; done; \\\n    for pass in 1 2 3 4 5; do [ $# -eq 0 ] || dpkg -i --skip-same-version \"$@\" >/dev/null 2>&1 && break; done; \\\n    dpkg --configure -a && bad= && for d in \"$@\"; do p=$(dpkg-deb -f \"$d\" Package) v=$(dpkg-deb -f \"$d\" Version); \\\n      case \"$(dpkg-query -W -f='${Version} ${db:Status-Abbrev}' \"$p\" 2>/dev/null)\" in \"$v ii\"*) ;; *) bad=\"$bad $p=$v\" ;; esac; done && \\\n    { [ -z \"$bad\" ] || { echo \"vendored debs not installed at their vendored version:$bad\" >&2; false; }; }\nCOPY --from=rusttoolchain /usr/local/rustup /usr/local/rustup\nCOPY --from=rusttoolchain /usr/local/cargo /usr/local/cargo\nWORKDIR /src\nCOPY vendored/vaultwarden-src/ .\nENV CARGO_NET_OFFLINE=true CARGO_HOME=/usr/local/cargo RUSTUP_TOOLCHAIN=1.99.0 RUSTUP_HOME=/usr/local/rustup PATH=/usr/local/cargo/bin:${PATH}\nENV VW_VERSION=1.37.4\nARG SOURCE_DATE_EPOCH=1791203961\nENV SOURCE_DATE_EPOCH=${SOURCE_DATE_EPOCH}\nRUN cargo build --release --offline --locked --features \"sqlite\" --bin vaultwarden && \\\n    cp target/release/vaultwarden /vaultwarden && /vaultwarden --version","lines_shown":24,"lines_total":55}},{"path":"Dockerfile.vendor","size":2354,"sha256":"d71d4a3a455079bf772c85920705cf9852603553cc418492e91e7abe9f6f4773","public":"account","lines":31},{"path":"MANIFEST.txt","size":2740805,"sha256":"d3e41b93c6b15da629e5444fbef090da91d6025bb9ed27209b0ec4a73f9511a8","public":"account","lines":36614},{"path":"SOURCE_DATE_EPOCH.txt","size":11,"sha256":"6f796b28b9aaaab3c3a22643ccacc20241869fe2f3706ab4382728476b1be1b5","public":"full","lines":1,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/SOURCE_DATE_EPOCH.txt","text":"1791203961\n"},{"path":"TARGET_DIGEST.txt","size":284,"sha256":"c5a01f80e5e778f3f2d9801f29014d91f71997b92d0f8decd5ca6bc3144a5281","public":"full","lines":6,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/TARGET_DIGEST.txt","text":"image_manifest_digest=sha256:5a333ebba93eb24b0fd0812ca9f7fe5728b9f7b5c383fa6edc13fe217c6d323f\nconfig_digest=sha256:6b5dc6677ebc3abf90edcfa35756fc6255cec7e4246f427b3ee2de21d1bbc13e\ntag=readystack/vaultwarden:1.37.4-CE-ubuntu24.04-r4\nprobe_port=8080\nprobe_path=/alive\nprobe_timeout=180\n"},{"path":"VERIFY_OFFLINE.sh","size":7331,"sha256":"8b036b1f9a7f7deb4dbab14ef6b7c40622d2820904e891b8845ba3580e924506","public":"account","lines":128},{"path":"docs/PROVENANCE.md","size":1956,"sha256":"0c48456326eb95d84b7d9f800883d54711c41f9c3c2c00a846c81545d29cd1cb","public":"account","lines":29},{"path":"docs/REBUILD.md","size":5123,"sha256":"56569e4d1b6a98f11486c5668ee97b408fb0e789886c24c11acbdce9926f1af0","public":"account","lines":57},{"path":"docs/VERIFY.md","size":1982,"sha256":"856e6d47eb31a77fa293171c21e65af031bcf04d954a5dc5345105f364d66dd2","public":"account","lines":34},{"path":"docs/provenance/BASE_IMAGE_DIGESTS.lock","size":66,"sha256":"a47a2c7a28e4733fa278231e98c0be8a0f5f3d34120110e693e50cc1367daab4","public":"full","lines":2,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/docs/provenance/BASE_IMAGE_DIGESTS.lock","text":"# base images for vaultwarden (resolve at build_kit)\nubuntu:24.04\n"},{"path":"docs/provenance/BUILD_RECIPE.json","size":5551,"sha256":"b15959e3e44ae119e6658b92fef0e87e1888d6d9f0b0ba51497135ec37878b5c","public":"account","lines":56,"redactions":[{"line":17,"kind":"internal host"},{"line":18,"kind":"internal host"},{"line":27,"kind":"internal host"},{"line":47,"kind":"internal host"}],"kit_sha256":"93c1361d5514645e662aa78d2bd0488a015f85850a3f6b680663cde8c86d4e92"},{"path":"docs/provenance/CUSTODY_INPUTS.json","size":659,"sha256":"4d53a7ed44787d98d5a49313c52faa8a5a7d74ecf6a8964674dd8b13f6ee9ddc","public":"account","lines":17},{"path":"docs/provenance/SOURCE_FILE_MANIFEST.json","size":33357,"sha256":"979eb40ad4f5aa8dc52f720a9cbe4ce35884b3de09c755eb2ecc5695f27f0b3e","public":"account","lines":574},{"path":"docs/provenance/SOURCE_TREE_HASH.json","size":316,"sha256":"1977f3f207eaba977d7dc6eca13350802ba2aa49b6f3dee8d4bd443b8835f499","public":"full","lines":9,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/docs/provenance/SOURCE_TREE_HASH.json","text":"{\n  \"schema\": \"kitforge.source_tree_hash.v1\",\n  \"slug\": \"vaultwarden\",\n  \"repo\": \"https://github.com/dani-garcia/vaultwarden\",\n  \"ref\": \"1.37.4\",\n  \"commit\": \"7c188967e7a467b19b2757bc3326f9cf3ccae327\",\n  \"tree_listing_sha256\": \"9a1a0dfc3ed6bad7f0f99d7a5b46982e5fec8e92cf0d20e7868b4d376b18eb26\",\n  \"file_count\": 567\n}"},{"path":"docs/provenance/SYSTEM_PINNING.lock","size":39,"sha256":"d2f713907be0b270098db9b0e786502e89cf2201bda0fc0502105e171a8b5d93","public":"account","lines":4},{"path":"docs/provenance/TOOLCHAIN.lock","size":2391,"sha256":"65e484fcc1e2acf578ace7da24f2c6e92a7ecb4af391bb1a193b5423f8154125","public":"account","lines":77},{"path":"rebuild.json","size":1433,"sha256":"0593bd8ba5d30cf527c394d6b235559d3182fcfdc85ffa2f95fc68bc459c28e1","public":"account","lines":38},{"path":"toolchain/BUILDKIT_TAG.txt","size":22,"sha256":"fcd530eeb02b063d2f047adad6eef896422a8e8d558513e5f09b2a262be32573","public":"full","lines":1,"url":"/api/recipe/vaultwarden/1.37.4-CE-ubuntu24.04-r4/files/toolchain/BUILDKIT_TAG.txt","text":"moby/buildkit:v0.31.2\n"}],"skipped":[],"kit_adds":{"bases":{"files":14,"bytes":602393162},"docs":{"files":618,"bytes":6144063},"toolchain":{"files":1,"bytes":111529472},"vendored":{"files":35957,"bytes":1019553140}},"links":{"page":"https://readystack.dev/products/vaultwarden/recipe","signup":"https://readystack.dev/login.html?create=1&next=%2Fproducts%2Fvaultwarden%2Frecipe","kit":"https://readystack.dev/buy.html?product=vaultwarden"}}