Skip to content

Use published Brotli backports in current catalog revisions #23

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
chen21019 merged 1 commit into from
Oct 25, 2026
Merged

Use published Brotli backports in current catalog revisions #23

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@ PastureStack is an independent community effort to preserve, audit, and moderniz

## Project status

Catalog `v0.3.17` includes thirteen new numeric template revisions that consume
qualified Ubuntu security backports in the corresponding component images.
Only packages already installed in each runtime are updated; configuration,
the coreutils provider and the established plugin ownership boundaries remain
Catalog `v0.3.18` adds eight numeric template revisions using published
System Image Preloader `v0.3.4`, Metadata Healthcheck `v0.3.19`, Internal DNS
`v0.17.15`, Resource Scheduler `v0.8.22` and IPsec `v0.14.42` images. Existing
questions, resource parameters, firewall choices and plugin ownership remain
unchanged. Previously published numeric revisions remain available.

The catalog exposes one Native project template and twenty-one
Expand All @@ -30,8 +30,8 @@ Officially unfixed Low/Medium findings remain tracked, not resolved; narrowly
scoped VEX decisions require product-specific evidence and retain the raw scan.
A clean gate is not a claim that every dependency has zero reported CVEs.

Network Services revision 14 uses Network Plugin Manager `v0.8.25`, Metadata
`v0.10.7` and Internal DNS `v0.17.14`. The recorded OCI manifest digests identify
Network Services revision 15 uses Network Plugin Manager `v0.8.25`, Metadata
`v0.10.7` and Internal DNS `v0.17.15`. The recorded OCI manifest digests identify
verified image content; they do not imply that GitHub has locked a release.
Runtime SBOMs, raw and interpreted findings, producer commits and publication
receipts are recorded per image in `catalog-images.json`. Remaining findings
Expand Down
18 changes: 9 additions & 9 deletions SUPPORTED.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,33 +10,33 @@ or out-of-scope templates from being presented as deployable software.
|---|---|---|---|---|
| PastureStack Native | Project template | v0.3.0 | Composes only reviewed, semantic-versioned infrastructure entries | Clean single-host provisioning and restart passed; restored-data validation pending |
| PastureStack Container Schedule | Infrastructure scheduling service | v0.6.2 | container-cron:v0.6.2 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack System Image Preloader | Infrastructure image-cache service | v0.3.3 | system-image-preloader:v0.3.3 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack System Image Preloader | Infrastructure image-cache service | v0.3.4 | system-image-preloader:v0.3.4 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Amazon ECR Credential Sync | Infrastructure registry service | v3.1.6 | Public PastureStack GHCR image with an explicit version tag | Published component; full runtime raw scan has zero findings; Catalog integration and environment acceptance remain distinct |
| Metadata Healthcheck | Infrastructure stack | v0.3.18 | metadata-healthcheck:v0.3.18 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Network Services | Infrastructure system stack | v0.3.12 | metadata-service:v0.10.7 and internal-dns:v0.17.14; Network Plugin Manager remains v0.8.25 | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| Metadata Healthcheck | Infrastructure stack | v0.3.19 | metadata-healthcheck:v0.3.19 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Network Services | Infrastructure system stack | v0.3.13 | metadata-service:v0.10.7 and internal-dns:v0.17.15; Network Plugin Manager remains v0.8.25 | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Network Diagnostics | Infrastructure diagnostics service | v0.2.2 | Two public PastureStack GHCR images with explicit version tags | Published component; exact runtime evidence is in catalog-images.json; environment upgrade/rollback remains separate |
| PastureStack Network Policy Manager | Infrastructure network-policy agent | v0.3.5 | network-policy-manager:v0.3.3 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack IPsec Overlay | Infrastructure network driver | v0.3.12 | ipsec-vxlan-overlay-network:v0.14.41 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack IPsec Overlay | Infrastructure network driver | v0.3.13 | ipsec-vxlan-overlay-network:v0.14.42 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Windows ECR Credential Sync | Windows infrastructure registry service | v3.1.2 | Public PastureStack GHCR Windows image with an explicit version tag | Source tests, cross-compilation, PE, license, anonymous distribution, and vulnerability gates passed; Windows-host runtime pending |
| PastureStack Windows Network Services | Windows infrastructure Metadata and DNS stack | v0.3.0 | Two public PastureStack GHCR Windows images with explicit version tags | Source tests, cross-compilation, PE, license, anonymous distribution, and vulnerability gates passed; Windows-host runtime pending |
| PastureStack Windows Container Networking | Windows NAT and transparent network-driver definition | v0.1.2 | pod-pause-image:v3.0.6 for its existing Linux sandbox role; Windows restrictions remain | Exact publication evidence is in catalog-images.json; this does not qualify a new Windows-host runtime matrix |
| PastureStack Layer 2 Flat Network | Optional infrastructure network driver | v0.3.6 | ipsec-vxlan-overlay-network:v0.14.41 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| Resource Scheduler | Infrastructure scheduling agent | v0.8.21 | resource-scheduler:v0.8.21 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Layer 2 Flat Network | Optional infrastructure network driver | v0.3.7 | ipsec-vxlan-overlay-network:v0.14.42 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| Resource Scheduler | Infrastructure scheduling agent | v0.8.22 | resource-scheduler:v0.8.22 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Route 53 DNS Sync | Infrastructure external-DNS agent | v0.8.1 | Public PastureStack GHCR image with an explicit version tag | Published component; exact runtime evidence is in catalog-images.json; environment upgrade/rollback remains separate |
| PastureStack Amazon EBS Storage | Infrastructure block-storage driver | v0.11.1 | Public PastureStack GHCR image with an explicit version tag | Published component; exact runtime evidence is in catalog-images.json; environment upgrade/rollback remains separate |
| PastureStack Amazon EFS Storage | Infrastructure shared-storage driver | v0.11.1 | Public PastureStack GHCR image with an explicit version tag | Published component; exact runtime evidence is in catalog-images.json; environment upgrade/rollback remains separate |
| PastureStack NFS Storage | Infrastructure storage driver | v0.11.1 | Public PastureStack GHCR image with an explicit version tag | Published component; exact runtime evidence is in catalog-images.json; environment upgrade/rollback remains separate |
| PastureStack Secret Volume | Infrastructure secret-volume driver | v0.1.4 | secrets-flexvolume-plugin:v0.2.2 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Vault Volume | Infrastructure Vault token-volume driver | v0.2.3 | vault-secrets-bridge:v0.1.3 and secrets-flexvolume-plugin:v0.2.2 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Per-Host Subnet Network | Optional infrastructure network driver | v0.3.4 | ipsec-vxlan-overlay-network:v0.14.41 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack VXLAN Overlay Network | Optional infrastructure network driver | v0.3.5 | ipsec-vxlan-overlay-network:v0.14.41 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack Per-Host Subnet Network | Optional infrastructure network driver | v0.3.5 | ipsec-vxlan-overlay-network:v0.14.42 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |
| PastureStack VXLAN Overlay Network | Optional infrastructure network driver | v0.3.6 | ipsec-vxlan-overlay-network:v0.14.42 with qualified Ubuntu runtime backports | Exact publication and runtime evidence is in catalog-images.json; managed-host upgrade and rollback remain separate |

Deployable image references contain semantic version tags only. A published
version tag must never be replaced. Manifest digests are retained only in the
corresponding GitHub Release verification evidence; they are not placed in
Catalog, Compose, API, or user-interface values.

Catalog `v0.3.17` adds the numeric revisions listed above and preserves all
Catalog `v0.3.18` adds the numeric revisions listed above and preserves all
previously published revisions. Each updated image has its own producer,
manifest digest, runtime SBOM and vulnerability evidence in `catalog-images.json`.
Component publication and Catalog validation are distinct from managed-host
Expand Down
Loading
Loading