MinIO RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 build trail
How ReadyStack built readystack/minio:RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/minio:RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 - Index digestsha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023
- linux/amd64 digestsha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99
- Archive
ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz - Archive SHA-256 now2a69e0dbcc3e7f6a12a0e13d90710e27de63ec27eed253aaded9c0d18da7affa
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-07T05:27:27Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.trail.json.sigstore ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductMinIO (minio) [MANIFEST.json]
- Release tagRELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 [MANIFEST.json]
- Imagereadystack/minio:RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 [MANIFEST.json]
- Image index digestsha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023 [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 [ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz (bytes 518194411) [MANIFEST.json]
- Archive sha256 at publish2a69e0dbcc3e7f6a12a0e13d90710e27de63ec27eed253aaded9c0d18da7affa [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/minio/minio [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream refRELEASE.2025-10-15T17-29-55Z [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit9e49d5e7a648f00e26f2246f4dc28e6b07f8c84a [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash2349200805cf08e1931ad35d051a378bf2839a098d6e0616ec72c6e85c0e6fb2 (files 1363) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:4f5ca115bf16800d0cdfbec89ffdc97ba83607458ea70e2d05f5bfcce44dbe03 [ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1760549395 (utc 2025-10-15T17:29:55Z) [ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.26.10-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af · platform digest sha256:88750ccdd0f2a77fcc00a14b1a48d6409bd8ddb5d7c2dd6ec0b4a2e916daf9d9
- ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json, engine]
- Engine commit(s)
- commit 010aa541a25a24b2cef6b4553320a093daeed530 · dirty yes · first drive 3562
- commit 0640ae3d5c24dd6ccf85da33ada7ba9659eea77c · dirty yes · first drive 3574
- commit a40e4d9d4d44a5f8647c6bf01ffdee4ed8801afd · dirty yes · first drive 3580
Why this release exists
Fully recorded- Chain838 (created 2026-11-07T04:17:20Z · trigger customer_request · upstream version RELEASE.2025-10-15T17-29-55Z) [chains, chains #838]
- Requestbuild request #513 (rebuild) (requested at 2026-11-07T02:01:25Z · requested by kitforge-agent · version RELEASE.2025-10-15T17-29-55Z) [build_requests, build_requests #513]
- Reasonrerelease agenda REVISION -> RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 (decay loop, IMP-08) [build_requests, build_requests #513 request_reason]
- Supersedesreadystack/minio:RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r7 (chain 739) [chains, chains #739]
The path through the harness
Fully recorded1 chain · 3 drives · 18 stages · 2 rewinds
Chain 838 release · ready_to_ship
Created 2026-11-07T04:17:20Z, upstream RELEASE.2025-10-15T17-29-55Z, build request 513 [chains, chains #838]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 3562 | 2026-11-07T04:17:45Z | 19.9 | build host 4 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3562] |
| 3574 | 2026-11-07T05:05:10Z | 3.4 | build host 4 withhold-publish | ready_to_ship at package_archive; 2 ticks [drive_runs, drive_runs #3574] |
| 3580 | 2026-11-07T05:22:30Z | — | build host 4 publish-held | not recorded [drive_runs, drive_runs #3580] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-07T04:17:56Z | 2026-11-07T04:17:56Z | 1 | 4
|
order_json aec959045bc5… |
acquire |
2026-11-07T04:18:02Z | 2026-11-07T04:18:03Z | 1 | 12
|
source_tree 50b48a4c2837…license_file 0d96a4ff68ad…custody_inputs 4f958ebdf1da…source_tree_hash 2fa8885faebb…source_file_manifest 8753829ade03… |
plan |
2026-11-07T04:18:45Z | 2026-11-07T04:18:45Z | 1 | 10
|
recon_report 06ac6363204a…input_pin_plan 791b35151c5d…toolchain_lock e29298a7a356… |
assemble_kit |
2026-11-07T04:22:47Z | 2026-11-07T04:22:48Z | 1 | 27
|
dockerfile 9e2ac58ca12b…build_recipe fcb76e0315fe…system_pinning fa091140511e…build_offline_sh 6633aa31b6b4…generate_sbom_sh ce0f1e6f1e70…first_boot_health 51372c3e4510…verify_offline_sh 3e8184ea230c…base_image_digests bc6200807bc5…dockerfile_offline 9e2ac58ca12b…first_build_digest 11153e792897… |
remediate |
2026-11-07T04:23:39Z | 2026-11-07T04:23:40Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 1881302daf24…security_report 46c429af4619… |
build_kit |
2026-11-07T04:28:45Z | 2026-11-07T04:28:46Z | 1 | 9
|
cosign_stamp 5b34993b6f83…locked_digest d1cea4353a9b…freeze_manifest 7f341e34165d…offline_rebuild_transcript 4049afc9672c… |
verdict |
2026-11-07T04:29:33Z | 2026-11-07T04:29:34Z | 1 | 8
|
scout_verdict f28f1601977b… |
publish_image |
2026-11-07T04:30:09Z | 2026-11-07T04:30:10Z | 1 | 7
|
hub_readme 3c73d9a53402…promotion_record 782a8e76879b… |
boot_instance |
2026-11-07T04:30:15Z | 2026-11-07T04:30:18Z | 2 | 3
|
instance_handle 43267e6977c8… |
sbom |
2026-11-07T04:30:29Z | 2026-11-07T04:30:30Z | 1 | 5
|
sbom_md b0980afa2b3d…sbom_json da74d71a935c… |
schema_discovery |
2026-11-07T04:30:33Z | 2026-11-07T04:30:33Z | 1 | 7
|
schema_hash 403a29f8b351…dependency_tree ac94b5d7b11d…table_classification ecf77f57880e… |
admin_handbook |
2026-11-07T04:30:42Z | 2026-11-07T04:30:43Z | 1 | 7
|
api_map 237c098db4a5…admin_handbook 34c99ee0532a… |
db_handbook |
2026-11-07T04:30:53Z | 2026-11-07T04:30:54Z | 1 | 8
|
db_handbook 14df9721a7b5…seed_isolation 2576a27b393e… |
seed_data |
2026-11-07T04:31:01Z | 2026-11-07T04:31:02Z | 1 | 6
|
seed_data_sql 630ddd7d22a2…seed_cases_json ca132dcd2a0c… |
seed_validate |
2026-11-07T04:31:05Z | 2026-11-07T04:31:05Z | 1 | 3
|
seed_data_contract 88b3c0890637… |
usecase_validate |
2026-11-07T04:31:29Z | 2026-11-07T04:31:30Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests 7786068b20c5…test_results 86bb97ec6f74…usecase_contract f16f8f58ff62… |
finalize_docs |
2026-11-07T04:31:36Z | 2026-11-07T04:31:37Z | 1 | 9
|
defects_json 5ce99fe3da65…release_notes 70cdfb52dab6…api_integration_guide a1620e9e2b93… |
package_archive invalidated 2026-11-07T05:21:40Z |
2026-11-07T04:37:39Z | 2026-11-07T05:08:33Z | 2 | 34 (final gate PASS)
|
sale_tar cf36c5cadc3b…checksums 4364c0717537…verify_md 608199eee0bc…rebuild_md ccf22e8940fb…manifest_txt f4231d01a72b…actions_jsonl a7c56e753d8f…provenance_md da1c2ab68aef…assetchain_log_md e9eccaec0c0f…assetchain_log_json 86d67340ff3b… |
[stage_runs]
Rewinds
- 2026-11-07T04:55:46Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23889] - 2026-11-07T05:21:40Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23999]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-07T05:08:33Z.
5 calls over 3 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 12660 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 14664 | L-A183, L-A15 |
usecase_validate | 1 | 0 | 0 | 1 | 0 | 2121 | L-A59 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
2 rounds, 2 counted, $0.76 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-07T04:38:18Z | 0 | 1 | 0 | findings to repackage [held_rounds, held_rounds #1429] | $0.45 | 3 rounds, $40.00 | 5545fcec567a… |
| 2 | 2026-11-07T05:09:02Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1433] | $0.31 | 3 rounds, $40.00 | cf36c5cadc3b… |
Defects
Fully recorded- Ledger entries1 [defects, defects where product_slug=minio and this tag or chain]
- Disclosed in the archive1 [docs/defects/defects.json, entries]
1 ledger entry: by severity high 1; by status fixed-before-release 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-minio-ca1cfb1195Admin handbook: Stale release tag r7 left in the upgrade notes; this release is r8. [defects, defects #160522] | high | fixed-before-release | held review (review model) | — |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 · published digest sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 139) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T05:22:54Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T05:22:42Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3729607667 · transparency-log entry
- log index 3729608173 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3730391234 · transparency-log entry · integrated 2026-11-07T05:26:14Z) [ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023 · state attached · log index 3730392986 · transparency-log entry
- kind sbom · digest sha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023 · state attached · log index 3730394055 · transparency-log entry
- kind vsa · digest sha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023 · state attached · log index 3730395828 · transparency-log entry
- kind provenance · digest sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 · state attached · log index 3730397348 · transparency-log entry
- kind sbom · digest sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 · state attached · log index 3730398718 · transparency-log entry
- kind vsa · digest sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 · state attached · log index 3730400771 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/minio/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-07T04:38:23Z on build host 1 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:f2510c79d7599c4174179f2858e9505763dae8b45175c43807e65c0afc04da99 [clean-room rebuild ledger, runs[605]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-07T04:30:10Z [stage_runs, stage_runs chain 838 stage publish_image]
- Archive manifests written2026-11-07T05:24:40Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 743 · probed 2026-11-07T04:26:08Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-07T05:27:27Z generated: by KitForge release/build_trail.py · generator commit a40e4d9d4d44a5f8647c6bf01ffdee4ed8801afd
- 2026-11-07T05:28:46Z publication: promoted at 2026-11-07T05:27:57Z · promoted digest sha256:a7ba2d3b21fd22d6da6208c097bd74c8b922152c7cbd5960afd9726c8f556023 · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 332 · checklist status complete · checklist at 2026-11-07T05:28:46Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/minio/RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/minio/RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8/), as staged for publishing | — |
ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json | beside the archive (prodasset /data/production/minio/RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8/), as staged for publishing | — |
ReadyStack-minio-RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8.rebuild.json.sigstore | beside the archive (prodasset /data/production/minio/RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/minio/RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 513 |
chains | sadb, ReadyStack's engine database (not published) | 838 |
defects | sadb, ReadyStack's engine database (not published) | minio RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 838 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 838 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 838 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 838 |
release_images | sadb, ReadyStack's engine database (not published) | minio RELEASE.2025-10-15T17-29-55Z-CE-ubuntu24.04-r8 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 838 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 838 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |