VictoriaMetrics v1.155.0-CE-ubuntu24.04-r2 build trail
How ReadyStack built readystack/victoriametrics:v1.155.0-CE-ubuntu24.04-r2 and its build kit, copied record by record: why the release exists, every chain, drive and stage it went through, the model work, the review rounds, the defects, the checks that verified it and when it was published. Each line names the record it comes from in brackets; a record that does not exist for this release says so.
This trail
As JSON- Image
readystack/victoriametrics:v1.155.0-CE-ubuntu24.04-r2 - Index digestsha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e
- linux/amd64 digestsha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3
- Archive
ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz - Archive SHA-256 nowb023c056d2d7e419abc31dc387b0c91df89f24deade9e5a2a7b953a7fe2c4b2f
- Pins record
docs/PINS.md,docs/provenance/PINS.jsonin the archive (since generated) - Generated2026-11-07T05:10:35Z by KitForge release/build_trail.py
- Sections9 sections, 8 fully recorded; 1 item not recorded
Signed with the release key The trail's signature is a Sigstore bundle beside it. Check it is ours before you rely on it:
cosign verify-blob --key https://readystack.dev/keys/cosign.pub \ --bundle ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.trail.json.sigstore ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.trail.json
IdentityWhy this release existsThe path through the harnessModel work per stageReviewDefectsVerificationPublicationPackages and CPU level
Identity
Fully recorded- ProductVictoriaMetrics (victoriametrics) [MANIFEST.json]
- Release tagv1.155.0-CE-ubuntu24.04-r2 [MANIFEST.json]
- Imagereadystack/victoriametrics:v1.155.0-CE-ubuntu24.04-r2 [MANIFEST.json]
- Image index digestsha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e [docs/provenance/LOCKED_DIGEST.txt]
- linux/amd64 image digestsha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 [ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json, subject.image_manifest_digest]
- ArchiveReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz (bytes 560651482) [MANIFEST.json]
- Archive sha256 at publishb023c056d2d7e419abc31dc387b0c91df89f24deade9e5a2a7b953a7fe2c4b2f [MANIFEST.json, tarball_sha256]
- Archive records agreeyes [MANIFEST.json, PUBLISH_MANIFEST.json and .cutover.json name the same sha256]
- Repack historynone: the archive is as first published [MANIFEST.json, repack_history]
- Upstream repositoryhttps://github.com/VictoriaMetrics/VictoriaMetrics [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream refv1.155.0 [docs/provenance/SOURCE_TREE_HASH.json]
- Upstream commit3fec2f72414d00d1acda807c8818d7af90cc966d [docs/provenance/SOURCE_TREE_HASH.json]
- Source tree hash7c17ef3e615d1e16d7eddb6396f70bac2aa4d76d76cf40a52ac34310b8b36c61 (files 8775) [docs/provenance/SOURCE_TREE_HASH.json, tree_listing_sha256 (sha256 of the sorted file listing)]
- Kit tree hashsha256:b8c8173006ab846080f40b2e002b33e29b730b2855abd3cf63bdd03243c09e2e [ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json, inputs.tree_hash]
- SOURCE_DATE_EPOCH1792770494 (utc 2026-10-23T15:48:14Z) [ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json, inputs.source_date_epoch]
- Base images
- ref golang:1.27.3-bookworm@sha256:972b4110ba0f47539a975c31e52c64765e1ff19f2d74469ae4a595c6676e80a5 · platform digest sha256:fea12ba16096adec0f699ce1c4da2154d320450e56c1f63671f95d2a3551c77b
- ref ubuntu:24.04@sha256:fe81560990fae86dc4743202b2cb4d3df98d0bcf949173cecef15ce1127ef852 · platform digest sha256:78d4744ead1f5b19b04d0df558ab182a5300903900755e515b2ca4d10eb2044d
- BuildKitmoby/buildkit:v0.31.2 (image digest sha256:e0e67ea9c4bb07bdef683e29f70f3b623d1eb9c82274a9ec04e6bb0511449fb0) [ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json, engine]
- Engine commit(s)
- commit c5b3141ed10b7ce0cea293da1be76d941c96da6f · dirty yes · first drive 3567
- commit 0640ae3d5c24dd6ccf85da33ada7ba9659eea77c · dirty yes · first drive 3573
Why this release exists
Fully recorded- Chain840 (created 2026-11-07T04:33:05Z · trigger customer_request · upstream version v1.155.0) [chains, chains #840]
- Requestbuild request #524 (rebuild) (requested at 2026-11-07T02:01:47Z · requested by kitforge-agent · version v1.155.0) [build_requests, build_requests #524]
- Reasonrerelease agenda REVISION -> v1.155.0-CE-ubuntu24.04-r2 (decay loop, IMP-08) [build_requests, build_requests #524 request_reason]
- Supersedesreadystack/victoriametrics:v1.155.0-CE-ubuntu24.04-r1 (chain 706) [chains, chains #706]
The path through the harness
Fully recorded1 chain · 2 drives · 18 stages · 1 rewind
Chain 840 release · ready_to_ship
Created 2026-11-07T04:33:05Z, upstream v1.155.0, build request 524 [chains, chains #840]
| Drive | Started | Minutes | Build host | How it stopped |
|---|---|---|---|---|
| 3567 | 2026-11-07T04:33:30Z | 17.4 | build host 2 withhold-publish | ready_to_ship at package_archive; 19 ticks [drive_runs, drive_runs #3567] |
| 3573 | 2026-11-07T05:05:07Z | — | build host 2 publish-held | not recorded [drive_runs, drive_runs #3573] |
Stages, in order
| Stage | First start | Passed | Attempts | Gate checks passed | Artifacts (SHA-256) |
|---|---|---|---|---|---|
intake |
2026-11-07T04:33:40Z | 2026-11-07T04:33:41Z | 1 | 4
|
order_json 2ba46cc5c2d5… |
acquire |
2026-11-07T04:33:51Z | 2026-11-07T04:33:53Z | 1 | 12
|
source_tree 6f39cb44d175…license_file 778f2412aa6e…custody_inputs 7884b02a57f0…source_tree_hash df3b5ee5c8b2…source_file_manifest 3b68d78e22e2… |
plan |
2026-11-07T04:34:23Z | 2026-11-07T04:34:23Z | 1 | 10
|
recon_report df9ea232117b…input_pin_plan 28ec8c104a0a…toolchain_lock 4d7dc4dd88db… |
assemble_kit |
2026-11-07T04:37:57Z | 2026-11-07T04:37:57Z | 1 | 27
|
dockerfile 96606f5352d0…build_recipe 6f29f4b16d73…system_pinning fa091140511e…build_offline_sh 6633aa31b6b4…generate_sbom_sh ce0f1e6f1e70…first_boot_health 87bc62021885…verify_offline_sh 3e8184ea230c…base_image_digests 5eebe338259a…dockerfile_offline 96606f5352d0…first_build_digest f5fb81d043dd… |
remediate |
2026-11-07T04:38:24Z | 2026-11-07T04:38:25Z | 1 | 8
|
vendored_apt e3b0c44298fc…remediation_log 7cb5d377d8b6…security_report 9d42c148561a… |
build_kit |
2026-11-07T04:42:28Z | 2026-11-07T04:42:29Z | 1 | 9
|
cosign_stamp ec5a1eb6e996…locked_digest efa0244eaf52…freeze_manifest 20b49ad2e8c3…offline_rebuild_transcript 94c189c6e79f… |
verdict |
2026-11-07T04:43:15Z | 2026-11-07T04:43:15Z | 1 | 8
|
scout_verdict f5f08db03a82… |
publish_image |
2026-11-07T04:43:52Z | 2026-11-07T04:43:53Z | 1 | 7
|
hub_readme f02b834f02b4…promotion_record 10f61a8bbe64… |
boot_instance |
2026-11-07T04:43:58Z | 2026-11-07T04:44:02Z | 2 | 3
|
instance_handle 36d53100dcc5… |
sbom |
2026-11-07T04:44:14Z | 2026-11-07T04:44:14Z | 1 | 5
|
sbom_md 1eeba440e2b4…sbom_json 2a059bbe8ed5… |
schema_discovery |
2026-11-07T04:44:17Z | 2026-11-07T04:44:18Z | 1 | 7
|
schema_hash 997183280d4a…dependency_tree 3e56c1062591…table_classification 3005232bf763… |
admin_handbook |
2026-11-07T04:44:24Z | 2026-11-07T04:44:25Z | 1 | 7
|
api_map d2fd8cf2f4e4…admin_handbook 085962c537ab… |
db_handbook |
2026-11-07T04:44:34Z | 2026-11-07T04:44:35Z | 1 | 8
|
db_handbook a21c328a8d5e…seed_isolation 1ad1b7663522… |
seed_data |
2026-11-07T04:44:43Z | 2026-11-07T04:44:44Z | 1 | 6
|
seed_data_sql 7dc08785a8e6…seed_cases_json 885336757c22… |
seed_validate |
2026-11-07T04:44:46Z | 2026-11-07T04:44:47Z | 1 | 3
|
seed_data_contract 0447d957f8be… |
usecase_validate |
2026-11-07T04:45:09Z | 2026-11-07T04:45:10Z | 1 | 10
|
failed_tests b2247b16f5f7…passed_tests 9277e6b2791c…test_results 9cc736c72fff…usecase_contract 8c2395ee67c9… |
finalize_docs |
2026-11-07T04:45:15Z | 2026-11-07T04:45:16Z | 1 | 9
|
defects_json f20560e99bcd…release_notes a011f9e5db03…api_integration_guide 8198d584c1b1… |
package_archive invalidated 2026-11-07T05:04:44Z |
2026-11-07T04:50:50Z | 2026-11-07T04:50:52Z | 1 | 34 (final gate PASS)
|
sale_tar 82f0c3ae2515…checksums 9e3719897893…verify_md 3b7cc71c27ad…rebuild_md 6f5956d34e3b…manifest_txt 186c06724ad6…actions_jsonl 9c02810cffad…provenance_md a83d31cfd8fc…assetchain_log_md e9eccaec0c0f…assetchain_log_json cc13c216194f… |
[stage_runs]
Rewinds
- 2026-11-07T05:04:44Z:
package_archivetopackage_archiveon docs_redo (scripts/redo-docs.py --stage package_archive) [stage_events, stage_events #23904]
Model work per stage
Fully recordedRole: writer model. Calls up to 2026-11-07T04:50:52Z.
5 calls over 3 stages
| Stage | Calls | Refused | Errors | Max attempt | Forced commits | Real tokens | Lesson rules shown |
|---|---|---|---|---|---|---|---|
plan | 2 | 0 | 0 | 1 | 0 | 8837 | L-A183, L-A15 |
remediate | 2 | 0 | 0 | 1 | 0 | 9106 | L-A183, L-A15 |
usecase_validate | 1 | 0 | 0 | 1 | 0 | 2103 | L-A59 |
[micro_step_runs] [lesson_recalls]
Review
Fully recordedRole: review model.
1 round, 1 counted, $0.20 recorded cost
| Round | Started | Critical | Major | Minor | Verdict | Cost | Cap in force | Archive reviewed |
|---|---|---|---|---|---|---|---|---|
| 1 | 2026-11-07T04:51:21Z | 0 | 0 | 0 | clean to publish [held_rounds, held_rounds #1430] | $0.20 | 3 rounds, $40.00 | 82f0c3ae2515… |
Defects
Fully recorded- Ledger entries8 [defects, defects where product_slug=victoriametrics and this tag or chain]
- Disclosed in the archive1 [docs/defects/defects.json, entries]
8 ledger entries: by severity low 8; by status fixed-in-release 7, open 1.
| Defect | Severity | Status | Found by | Fixed in |
|---|---|---|---|---|
RSD-victoriametrics-117850871aDatabase handbook: Claims write access is limited to the data directory; measured, /tmp is writable too. [defects, defects #162021] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-a6df21af79Database handbook: Overriding any argument by appending is false for -httpListenAddr, a repeatable flag: the new value is added and :8428 keeps listening. [defects, defects #162022] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-64fbd6d0cfAdmin handbook: The example publishes only TCP while the listener also serves UDP; UDP Graphite senders get nothing. [defects, defects #162023] | low | open | held review (review model) | — |
RSD-victoriametrics-c8c31b4e59Admin handbook: The fix step is the failing command; the ownership change that makes it work is only in the migration section. [defects, defects #162024] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-1e8181d1d9API guide: Contradicts the guide's own later statement; a customer looking for the product version here gets 2.24.0. [defects, defects #162025] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-94ddeb0464Database handbook: Same test: without a volume, data written before docker stop was still served after docker start. [defects, defects #162026] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-64a4af7b3dAdmin handbook: Ran the image with no volume, wrote z_v, docker stop + docker start jt-ha627-c: /api/v1/label/__name__/values still returned z_v. [defects, defects #162027] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
RSD-victoriametrics-a5752fe7a0Admin handbook: docker run -v <uid-1000 755 dir>:/victoria-metrics-data: status Exited (2); log 'FATAL: cannot create lock file "/victoria-metrics-data/flock.lock": ... [defects, defects #162028] | low | fixed-in-release | held review (review model) | v1.155.0-CE-ubuntu24.04-r2 |
Verification
1 item not recorded- Reproduced before publishingyes (rebuilt digest sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 · published digest sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 · digest match yes · builder moby/buildkit:v0.31.2 · build seconds 112) [docs/provenance/REPRO_VERIFICATION.json, verified]
- Final contract gate (G8)PASS (checks artifact_coverage, assetchain_coverage, cosign, cpu_baseline, offline_rebuild, rebuild_manifest, scan_grade, scout_grade_a, script_copies, tag_base_os, trademark_shipped, vex_shipped) [g8_result.json, result]
- Grade at releaseA (percent 94 · docker grade B · docker percent 83 · tool docker scout policy 1.26.0 · config docker-default · org vex no · at 2026-11-07T05:05:27Z · failing Docker Scout counts 96 packages with copyleft licences (GPL, LGPL, MPL), all of them operating-system packages (it counts only packages whose licence it can read; the SBOM lists every component). · corrections No outdated base images) [SCOUT_EVIDENCE.json, docker_scout_policy.corrected]
- Image signatureverified on the index and the linux/amd64 manifest (key fingerprint 04daa92344a52dbc · at 2026-11-07T05:05:17Z) [docs/provenance/IMAGE_EVIDENCE.json, signed]
- Image signature transparency-log entries
- log index 3729711322 · transparency-log entry
- log index 3729712430 · transparency-log entry
- rebuild.json signatureSigstore bundle, release key (key fingerprint 04daa92344a52dbc · log index 3730137900 · transparency-log entry · integrated 2026-11-07T05:09:15Z) [ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json.sigstore, verificationMaterial.tlogEntries[0]]
- Signed attestations
- kind provenance · digest sha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e · state attached · log index 3730140786 · transparency-log entry
- kind sbom · digest sha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e · state attached · log index 3730142789 · transparency-log entry
- kind vsa · digest sha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e · state attached · log index 3730145298 · transparency-log entry
- kind provenance · digest sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 · state attached · log index 3730147267 · transparency-log entry
- kind sbom · digest sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 · state attached · log index 3730149464 · transparency-log entry
- kind vsa · digest sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 · state attached · log index 3730151355 · transparency-log entry
- Pins recorddocs/PINS.md and docs/provenance/PINS.json in the archive (https://readystack.dev/products/victoriametrics/recipe) [docs/provenance/PINS.json]
Offline clean-room rebuilds
- 2026-11-07T04:51:27Z on build host 3 (Docker-in-Docker daemon with --network none): bit for bit yes, digest match yes, customer verify yes
rebuilt sha256:1670f6133d645eb43fced31af135d9e9b690c7d0225556df5185ea03c127e2e3 [clean-room rebuild ledger, runs[607]]
- Not recorded: the policy tool's --result-file itself (its per-policy results are copied into SCOUT_EVIDENCE.json and the archive's IMAGE_EVIDENCE.json; the file is not kept)
Publication
Fully recorded 1 pending at generation- Image pushed (internal tag), publish_image passed2026-11-07T04:43:53Z [stage_runs, stage_runs chain 840 stage publish_image]
- Archive manifests written2026-11-07T05:07:34Z [PUBLISH_MANIFEST.json, published_at]
- Pending at generation: the archive cut-over on prodasset, the release tag's promotion and the site event (this trail was generated after G8 and before them; they are appended as a 'publication' event in History)
Packages and CPU level
Fully recorded- x86-64 level the image needsv1 (used v4 · baseline v2 · elf files 744 · probed 2026-11-07T04:40:21Z · source build_kit) [release_images, isa_level_hard]
History
2 events- 2026-11-07T05:10:35Z generated: by KitForge release/build_trail.py · generator commit 0640ae3d5c24dd6ccf85da33ada7ba9659eea77c
- 2026-11-07T05:11:57Z publication: promoted at 2026-11-07T05:11:07Z · promoted digest sha256:6c4c3d92d378196569bb2bdc5894bbd1545f9d9b8ac67154f72ff771d8c3d10e · promotion method imagetools_create_retag_by_digest_no_rebuild · site event 331 · checklist status complete · checklist at 2026-11-07T05:11:57Z · record workspace: deliverables/provenance/PROMOTION_RECORD.json, RELEASE_CHECKLIST.json
Records
25 records| Record | Where it is | Rows |
|---|---|---|
docs/defects/defects.json | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/IMAGE_EVIDENCE.json | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/LOCKED_DIGEST.txt | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/PINS.json | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/REPRO_VERIFICATION.json | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
docs/provenance/SOURCE_TREE_HASH.json | inside the archive (ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.tar.gz) | — |
MANIFEST.json | beside the archive (prodasset /data/production/victoriametrics/v1.155.0-CE-ubuntu24.04-r2/), as staged for publishing | — |
PUBLISH_MANIFEST.json | beside the archive (prodasset /data/production/victoriametrics/v1.155.0-CE-ubuntu24.04-r2/), as staged for publishing | — |
ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json | beside the archive (prodasset /data/production/victoriametrics/v1.155.0-CE-ubuntu24.04-r2/), as staged for publishing | — |
ReadyStack-victoriametrics-v1.155.0-CE-ubuntu24.04-r2.rebuild.json.sigstore | beside the archive (prodasset /data/production/victoriametrics/v1.155.0-CE-ubuntu24.04-r2/), as staged for publishing | — |
SCOUT_EVIDENCE.json | beside the archive (prodasset /data/production/victoriametrics/v1.155.0-CE-ubuntu24.04-r2/), as staged for publishing | — |
clean-room rebuild ledger | the clean-room rebuild ledger (runstate/audit-2026-09/bit4bit.json, not published) | — |
build_requests | sadb, ReadyStack's engine database (not published) | 524 |
chains | sadb, ReadyStack's engine database (not published) | 840 |
defects | sadb, ReadyStack's engine database (not published) | victoriametrics v1.155.0-CE-ubuntu24.04-r2 |
drive_runs | sadb, ReadyStack's engine database (not published) | chain 840 |
held_rounds | sadb, ReadyStack's engine database (not published) | chain 840 |
lesson_recalls | sadb, ReadyStack's engine database (not published) | chain 840 |
micro_step_runs | sadb, ReadyStack's engine database (not published) | chain 840 |
release_images | sadb, ReadyStack's engine database (not published) | victoriametrics v1.155.0-CE-ubuntu24.04-r2 |
stage_events | sadb, ReadyStack's engine database (not published) | chain 840 |
stage_runs | sadb, ReadyStack's engine database (not published) | chain 840 |
attestations.json | the chain's workspace on the controller (not published) | — |
deliverables/provenance/PROMOTION_RECORD.json | the chain's workspace on the controller (not published) | — |
g8_result.json | the chain's workspace on the controller (not published) | — |