Namespace
halohub
Image / Taghalo-pro:2.27
Content Digestsha256:794438ea8537779bdb85c29a6e28a1d8f3107c4740ee93ef9e5e1f48fb50b069
Details
2026-10-23 16:19:19 UTC
369 MB
Labels
-
maintainerjohnniang <johnniang@foxmail.com>
-
org.opencontainers.image.created2026-10-23T16:16:22.669Z
-
org.opencontainers.image.description
-
org.opencontainers.image.licensesGPL-3.0
-
org.opencontainers.image.revision988c6372e200343895c3bf36cdb5568b31a2f0a6
-
org.opencontainers.image.sourcehttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.titlehalo-pro
-
org.opencontainers.image.urlhttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.version2
Environment
HALO_WORK_DIR/root/.halo2
JAVA_HOME/opt/java/openjdk
JAVA_VERSIONjdk-21.0.12.1+1
JVM_OPTS LANGen_US.UTF-8
LANGUAGEen_US:en
LC_ALLen_US.UTF-8
PATH/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SPRING_CONFIG_LOCATIONoptional:classpath:/;optional:file:/root/.halo2/
TZAsia/Shanghai
Layers
[#000] sha256:435bf5c20694c99dd5a9877e58e24b26a2207fcf8c692a3c3ce3c867770a5b41 - 10.89% (40.2 MB)
[#001] sha256:d9d511d19a19ebdeda520e0752f184d457905c7a310df5b748d133a51274ecd4 - 0.0% (391 Bytes)
[#002] sha256:082f3711ec02b5a05a0fbee55570854a286bad6c219253407b7351ec4278a5e0 - 5.2% (19.2 MB)
[#003] sha256:0df34dd379940da83b42705ddc0ff5003ce7a013e912a7c4bf90c54e2072a010 - 13.71% (50.6 MB)
[#004] sha256:35e448951dfd8efd541223c0694e786af2edd0ee771ca82155105d36b58ce905 - 0.0% (159 Bytes)
[#005] sha256:4c7ba16bd344f677c6f8d058cbc17116b5dc990913267c9cc52980d2dfcd054e - 0.0% (2.41 KB)
[#006] sha256:d12a82da399dddc5b3650e4f2afb46f7a5c544bf22601b08c1e9f93650a94a54 - 0.0% (101 Bytes)
[#007] sha256:58d67a0b41cf950b15941fd497510f280107a125b76ac8ff66a92ae8c25ee8a7 - 40.0% (148 MB)
[#008] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#009] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#010] sha256:1a1b2e7629d2c86b43d2c4efd1333d37a587b41955fe6d3caf6904a8009adeac - 21.75% (80.3 MB)
[#011] sha256:b9770458296568b43591a42d8c70600d19b61dd94e1f3cc94479b7b522b8a94f - 0.03% (98.5 KB)
[#012] sha256:89cb71c294d04cdfa2699d608a9cd1fd51735146efbadcc28695b4337dcb7238 - 0.0% (193 Bytes)
[#013] sha256:78435670a3857f7778a6278fa49eb1b204bda04b6f67d334bde48c6a61465669 - 8.43% (31.1 MB)
History
umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.9621.tar --tag 26.04
2026-10-06 21:25:30 UTC (Set entrypoint)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd
2026-10-06 21:25:30 UTC (Set default commands)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash
2026-10-06 21:25:30 UTC (Set default PATH for bare-based rock)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-06 21:25:30 UTC (Set labels)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-10-06T21:25:30.040262+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 21:25:30 UTC (Set annotations)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-10-06T21:25:30.040262+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 21:25:30 UTC (Add rock control metadata)umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.control_data.9621.tar
2026-10-17 00:17:39 UTC (buildkit.dockerfile.v0)ENV JAVA_HOME=/opt/java/openjdk
2026-10-17 00:17:39 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-17 00:17:39 UTC (buildkit.dockerfile.v0)ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
2026-10-17 00:17:39 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends curl wget gnupg fontconfig ca-certificates p11-kit tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit
2026-10-17 00:17:39 UTC (buildkit.dockerfile.v0)ENV JAVA_VERSION=jdk-21.0.12.1+1
2026-10-17 00:19:23 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='2413149700df0f7d440500a84a8f764c535f21e5a5e87d38328b64eec2c5b500'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_x64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; arm64) ESUM='14be1f35ebdbd1f6e8d57eb911a3ffb74d6d9aa255abc5daf2b1302002cf2cf2'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_aarch64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; ppc64el) ESUM='d2f07f1d97faab23b3add1af92db402b721b5b251cedab7144fdd4b2bf2e2f13'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_ppc64le_linux_hotspot_21.0.12.1_1.tar.gz'; ;; s390x) ESUM='df43dc82a935868915a4b76227e2c63ffeb32868b608980dc67312a3d6217e1e'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_s390x_linux_hotspot_21.0.12.1_1.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit
2026-10-17 00:19:23 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit
2026-10-17 00:19:23 UTC (buildkit.dockerfile.v0)COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
2026-10-17 00:19:23 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/__cacert_entrypoint.sh"]
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)LABEL maintainer=johnniang <johnniang@foxmail.com>
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)WORKDIR /application
2026-10-23 16:17:47 UTC (buildkit.dockerfile.v0)COPY /application/extracted/dependencies/ ./ # buildkit
2026-10-23 16:17:47 UTC (buildkit.dockerfile.v0)COPY /application/extracted/spring-boot-loader/ ./ # buildkit
2026-10-23 16:17:47 UTC (buildkit.dockerfile.v0)COPY /application/extracted/snapshot-dependencies/ ./ # buildkit
2026-10-23 16:17:47 UTC (buildkit.dockerfile.v0)COPY /application/extracted/application/ ./ # buildkit
2026-10-23 16:17:47 UTC (buildkit.dockerfile.v0)ENV JVM_OPTS= HALO_WORK_DIR=/root/.halo2 SPRING_CONFIG_LOCATION=optional:classpath:/;optional:file:/root/.halo2/ TZ=Asia/Shanghai
2026-10-23 16:17:52 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eu; security="$JAVA_HOME/lib/security"; blocked="$security/blocked.certs"; listing="$security/emudhra-cacerts.txt"; [ -f "$blocked" ] || { echo "CVE-2026-91403 stopgap: $blocked is missing" >&2; exit 1; }; blocked_before=$(grep -cE '^[0-9A-F]{64}$' "$blocked" || true); for fingerprint in 42C4ACCD12C4F59597925E1A08A7A90102608543809308D50EC427E118BA1493 45A883F349AEDFD5F3A649B5498FFB121712BA8B448F3F2A91DBC5A766FCDDBE 98B896625C0C230ADEEC3EB2CF6AAD5001ECF9156A68644E82374CE5833BC25B 5F1DED4DD590AF74631290CF073B122A2AAC6A1FA479778A0BD43579BD832699 E7568FE6E12331F4FD7DE61DA4C7559D0F8EB192A218D4741A3BA75184333838 579480AEA166290BD3C643589E795FC0D0E54E86505D180F1DFF99EFD3199512 0164D7CEAE5BB909C272AF151FF44B1177AE9B47D9424B94F1D9558C30934D19 62B7F9868263F72F6911FC78CEAF72C1979158B7368BF648683BB2AA39B02E72 CB6E15165AC802E9B3F993F16C25D41F4E81C21EBDE71AE1B012AC00BF9C7C3F 7485B51C0ED192878FA1D2F948FB529AE1842CC5086C4B67F7BE5B2039DE9489 432EC25F0D28DE9006D97BF752F17BBB2CD41F669933FCB072D9A1148D0261F3 FD9D5C2DBBD4995AB69B8D50C439D9527B00529199C2FD01B2174EB58F07021F 9E39DE2881273ACC225A149C72BA3E0F51424963669AB633EE1DC7DF5DB067B4 A496E23AC0CAB8155FC9B117B97EAE368EFCBB9041AEC8804D5A308D2D01C2D8 4B2460A466F95FD40113BCDCCA2CEB29B3B093921DE45474DA7DF48874C630B1 84112972B8E59D14560AE7E7119654474AAD119990CF3722BFC1E3B91615E1FD; do grep -qx "$fingerprint" "$blocked" || printf '%s\n' "$fingerprint" >> "$blocked"; done; blocked_after=$(grep -cE '^[0-9A-F]{64}$' "$blocked"); keytool -list -v -cacerts -storepass changeit > "$listing"; awk '/^Alias name: /{alias=substr($0,13)} /^Owner: CN=emSign (Root CA - C1|ECC Root CA - C3|ECC Root CA - G3),/{print alias}' "$listing" > "$listing.remove"; while IFS= read -r alias; do keytool -delete -cacerts -storepass changeit -alias "$alias"; done < "$listing.remove"; rm -f "$listing" "$listing.remove"; trusted_emsign=$(keytool -list -cacerts -storepass changeit | grep -ci emsign || true); test "$trusted_emsign" -eq 1 || { echo "CVE-2026-91403 stopgap: expected only emSign Root CA - G1 to remain, found $trusted_emsign emSign roots" >&2; exit 1; }; echo "CVE-2026-91403 stopgap applied: $((blocked_after - blocked_before)) fingerprints added, $blocked_after blocked in total" # buildkit
2026-10-23 16:17:52 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone # buildkit
2026-10-23 16:19:19 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c java -XX:ArchiveClassesAtExit=application.jsa -Dspring.context.exit=onRefresh -jar application.jar --halo.work-dir=/tmp/halo2 && rm -rf /tmp/halo2 # buildkit
2026-10-23 16:19:19 UTC (buildkit.dockerfile.v0)EXPOSE [8090/tcp]
2026-10-23 16:19:19 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["sh" "-c" "exec java ${JVM_OPTS} -XX:SharedArchiveFile=application.jsa -jar application.jar \"$@\"" "--"]
Details
2026-10-23 16:29:44 UTC
367 MB
Labels
-
maintainerjohnniang <johnniang@foxmail.com>
-
org.opencontainers.image.created2026-10-23T16:16:22.669Z
-
org.opencontainers.image.description
-
org.opencontainers.image.licensesGPL-3.0
-
org.opencontainers.image.revision988c6372e200343895c3bf36cdb5568b31a2f0a6
-
org.opencontainers.image.sourcehttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.titlehalo-pro
-
org.opencontainers.image.urlhttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.version2
Environment
HALO_WORK_DIR/root/.halo2
JAVA_HOME/opt/java/openjdk
JAVA_VERSIONjdk-21.0.12.1+1
JVM_OPTS LANGen_US.UTF-8
LANGUAGEen_US:en
LC_ALLen_US.UTF-8
PATH/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SPRING_CONFIG_LOCATIONoptional:classpath:/;optional:file:/root/.halo2/
TZAsia/Shanghai
Layers
[#000] sha256:00dbf11534ae4abda99e035d0e681f5254da63d2f778eaed69f1e5f6be9a6092 - 10.68% (39.2 MB)
[#001] sha256:e8eae6888566fa953bb1c57088f997a22020e240963959b195cbe865109eabd9 - 0.0% (386 Bytes)
[#002] sha256:9bed5c298c55f553d0726079848b37a5cbc56f764d150ff5ce1ccbb27a9bcdc4 - 5.18% (19 MB)
[#003] sha256:bf42c0e7af495d6d31fb1776a3649af76e4f58fd4fb715fabfe9d2cc766d4036 - 13.58% (49.9 MB)
[#004] sha256:73d7511213b9d9634c253ef8cdd6d8de0844cd87150b05370fcf648f29f8ad30 - 0.0% (159 Bytes)
[#005] sha256:5b345474eca76b320f9140446aa0d3a2b9c2f11928bda8408423754292f48f1f - 0.0% (2.41 KB)
[#006] sha256:bb799a9a05ddbe7a82e600b6ef31b82f6ca5542e109495c2a755faf4006c8bf2 - 0.0% (101 Bytes)
[#007] sha256:3827de222078aa12279306f0a257c2ea477f6565c3c272e2b3460c84899835ca - 40.22% (148 MB)
[#008] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#009] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#010] sha256:ecd5911afbd10379e38c382a0ef5137901cce002f78998780c93dca7f4deaf58 - 21.87% (80.3 MB)
[#011] sha256:999069955ef3e8a76343aa115752fe495365fb6a0a603e4458dfd301dabe981f - 0.03% (98.5 KB)
[#012] sha256:0e86fcbc54d054cc632a79aba19ed8296f9d7ff295619f6dc47676a2d5cf7451 - 0.0% (193 Bytes)
[#013] sha256:d4976ab7a35bd062a90e4529bca1842143071570a77a1e87fdf545e0e2aa4fb5 - 8.46% (31.1 MB)
History
umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.9614.tar --tag 26.04
2026-10-06 20:38:12 UTC (Set entrypoint)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd
2026-10-06 20:38:12 UTC (Set default commands)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash
2026-10-06 20:38:12 UTC (Set default PATH for bare-based rock)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-06 20:38:12 UTC (Set labels)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-10-06T20:38:12.175309+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:38:12 UTC (Set annotations)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-10-06T20:38:12.175309+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:38:12 UTC (Add rock control metadata)umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.control_data.9614.tar
2026-10-17 00:19:41 UTC (buildkit.dockerfile.v0)ENV JAVA_HOME=/opt/java/openjdk
2026-10-17 00:19:41 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-17 00:19:41 UTC (buildkit.dockerfile.v0)ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
2026-10-17 00:19:41 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends curl wget gnupg fontconfig ca-certificates p11-kit tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit
2026-10-17 00:19:41 UTC (buildkit.dockerfile.v0)ENV JAVA_VERSION=jdk-21.0.12.1+1
2026-10-17 00:19:44 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='2413149700df0f7d440500a84a8f764c535f21e5a5e87d38328b64eec2c5b500'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_x64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; arm64) ESUM='14be1f35ebdbd1f6e8d57eb911a3ffb74d6d9aa255abc5daf2b1302002cf2cf2'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_aarch64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; ppc64el) ESUM='d2f07f1d97faab23b3add1af92db402b721b5b251cedab7144fdd4b2bf2e2f13'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_ppc64le_linux_hotspot_21.0.12.1_1.tar.gz'; ;; s390x) ESUM='df43dc82a935868915a4b76227e2c63ffeb32868b608980dc67312a3d6217e1e'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_s390x_linux_hotspot_21.0.12.1_1.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit
2026-10-17 00:19:44 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit
2026-10-17 00:19:44 UTC (buildkit.dockerfile.v0)COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
2026-10-17 00:19:44 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/__cacert_entrypoint.sh"]
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)LABEL maintainer=johnniang <johnniang@foxmail.com>
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)WORKDIR /application
2026-10-23 16:19:21 UTC (buildkit.dockerfile.v0)COPY /application/extracted/dependencies/ ./ # buildkit
2026-10-23 16:19:21 UTC (buildkit.dockerfile.v0)COPY /application/extracted/spring-boot-loader/ ./ # buildkit
2026-10-23 16:19:21 UTC (buildkit.dockerfile.v0)COPY /application/extracted/snapshot-dependencies/ ./ # buildkit
2026-10-23 16:19:22 UTC (buildkit.dockerfile.v0)COPY /application/extracted/application/ ./ # buildkit
2026-10-23 16:19:22 UTC (buildkit.dockerfile.v0)ENV JVM_OPTS= HALO_WORK_DIR=/root/.halo2 SPRING_CONFIG_LOCATION=optional:classpath:/;optional:file:/root/.halo2/ TZ=Asia/Shanghai
2026-10-23 16:20:30 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eu; security="$JAVA_HOME/lib/security"; blocked="$security/blocked.certs"; listing="$security/emudhra-cacerts.txt"; [ -f "$blocked" ] || { echo "CVE-2026-91403 stopgap: $blocked is missing" >&2; exit 1; }; blocked_before=$(grep -cE '^[0-9A-F]{64}$' "$blocked" || true); for fingerprint in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do grep -qx "$fingerprint" "$blocked" || printf '%s\n' "$fingerprint" >> "$blocked"; done; blocked_after=$(grep -cE '^[0-9A-F]{64}$' "$blocked"); keytool -list -v -cacerts -storepass changeit > "$listing"; awk '/^Alias name: /{alias=substr($0,13)} /^Owner: CN=emSign (Root CA - C1|ECC Root CA - C3|ECC Root CA - G3),/{print alias}' "$listing" > "$listing.remove"; while IFS= read -r alias; do keytool -delete -cacerts -storepass changeit -alias "$alias"; done < "$listing.remove"; rm -f "$listing" "$listing.remove"; trusted_emsign=$(keytool -list -cacerts -storepass changeit | grep -ci emsign || true); test "$trusted_emsign" -eq 1 || { echo "CVE-2026-91403 stopgap: expected only emSign Root CA - G1 to remain, found $trusted_emsign emSign roots" >&2; exit 1; }; echo "CVE-2026-91403 stopgap applied: $((blocked_after - blocked_before)) fingerprints added, $blocked_after blocked in total" # buildkit
2026-10-23 16:20:31 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone # buildkit
2026-10-23 16:29:44 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c java -XX:ArchiveClassesAtExit=application.jsa -Dspring.context.exit=onRefresh -jar application.jar --halo.work-dir=/tmp/halo2 && rm -rf /tmp/halo2 # buildkit
2026-10-23 16:29:44 UTC (buildkit.dockerfile.v0)EXPOSE [8090/tcp]
2026-10-23 16:29:44 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["sh" "-c" "exec java ${JVM_OPTS} -XX:SharedArchiveFile=application.jsa -jar application.jar \"$@\"" "--"]
Details
2026-10-23 16:28:01 UTC
376 MB
Labels
-
maintainerjohnniang <johnniang@foxmail.com>
-
org.opencontainers.image.created2026-10-23T16:16:22.669Z
-
org.opencontainers.image.description
-
org.opencontainers.image.licensesGPL-3.0
-
org.opencontainers.image.revision988c6372e200343895c3bf36cdb5568b31a2f0a6
-
org.opencontainers.image.sourcehttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.titlehalo-pro
-
org.opencontainers.image.urlhttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.version2
Environment
HALO_WORK_DIR/root/.halo2
JAVA_HOME/opt/java/openjdk
JAVA_VERSIONjdk-21.0.12.1+1
JVM_OPTS LANGen_US.UTF-8
LANGUAGEen_US:en
LC_ALLen_US.UTF-8
PATH/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SPRING_CONFIG_LOCATIONoptional:classpath:/;optional:file:/root/.halo2/
TZAsia/Shanghai
Layers
[#000] sha256:a262d7f3fc44532425408a05158e95511d4ebe3af8c0a1de354e7157bb27d6f0 - 11.97% (45 MB)
[#001] sha256:15f84129b3088bcac32100330a0fc3d834e81f5cfe23a85ce237f2a63cc920d6 - 0.0% (391 Bytes)
[#002] sha256:9f0e26bf3fbdbb57517bdaf382e6b3d646d1d6c2e575f57a68f8ed3cf1df89ff - 5.69% (21.4 MB)
[#003] sha256:65fb7af4b51a2fb06972e2e1ba0b1b57cb69990e22f5a3d659f3701df72e9b4d - 13.47% (50.7 MB)
[#004] sha256:38890186bd6cb1eedd89331512022cc1b3d653eb861d4bb17f9655f464e7fb38 - 0.0% (161 Bytes)
[#005] sha256:fe50b629f270324697fdccae22ca7b166b36ecfee7cd86eee1fbd30963dc4f0e - 0.0% (2.41 KB)
[#006] sha256:a3f437a8ec8da13716c06cd947ed14938b6115632c4d0cf728db1e6f7e752fe1 - 0.0% (101 Bytes)
[#007] sha256:2b33ac4097da40b417f791e76b5c1b2f28ca26142fdabaa86126989d31e4fb81 - 39.26% (148 MB)
[#008] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#009] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#010] sha256:bcb0d97d46d7f16db3afcb97cb99d7f1cb171d7e42bd850ba335c401dc68b443 - 21.35% (80.3 MB)
[#011] sha256:9dd2907aca941c8ef517ec1912375b042ff2fbeff69398039e367c8b6d801e9f - 0.03% (98.5 KB)
[#012] sha256:91bd4614aed6edf70b0a9540ce3f6aab256f7debe24e09d24e21c5893fc97f8d - 0.0% (192 Bytes)
[#013] sha256:4975293d4ce96804e3bb14bb1a98aaef0b49905b47e77c765e9947185ce88388 - 8.23% (31 MB)
History
umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.9489.tar --tag 26.04
2026-10-06 20:40:52 UTC (Set entrypoint)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd
2026-10-06 20:40:52 UTC (Set default commands)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash
2026-10-06 20:40:52 UTC (Set default PATH for bare-based rock)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-06 20:40:52 UTC (Set labels)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-10-06T20:40:52.926628+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:40:52 UTC (Set annotations)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-10-06T20:40:52.926628+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:40:52 UTC (Add rock control metadata)umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.control_data.9489.tar
2026-10-17 00:18:16 UTC (buildkit.dockerfile.v0)ENV JAVA_HOME=/opt/java/openjdk
2026-10-17 00:18:16 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-17 00:18:16 UTC (buildkit.dockerfile.v0)ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
2026-10-17 00:18:16 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends curl wget gnupg fontconfig ca-certificates p11-kit tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit
2026-10-17 00:18:16 UTC (buildkit.dockerfile.v0)ENV JAVA_VERSION=jdk-21.0.12.1+1
2026-10-17 00:33:19 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='2413149700df0f7d440500a84a8f764c535f21e5a5e87d38328b64eec2c5b500'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_x64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; arm64) ESUM='14be1f35ebdbd1f6e8d57eb911a3ffb74d6d9aa255abc5daf2b1302002cf2cf2'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_aarch64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; ppc64el) ESUM='d2f07f1d97faab23b3add1af92db402b721b5b251cedab7144fdd4b2bf2e2f13'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_ppc64le_linux_hotspot_21.0.12.1_1.tar.gz'; ;; s390x) ESUM='df43dc82a935868915a4b76227e2c63ffeb32868b608980dc67312a3d6217e1e'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_s390x_linux_hotspot_21.0.12.1_1.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit
2026-10-17 00:33:21 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit
2026-10-17 00:33:21 UTC (buildkit.dockerfile.v0)COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
2026-10-17 00:33:21 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/__cacert_entrypoint.sh"]
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)LABEL maintainer=johnniang <johnniang@foxmail.com>
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)WORKDIR /application
2026-10-23 16:19:09 UTC (buildkit.dockerfile.v0)COPY /application/extracted/dependencies/ ./ # buildkit
2026-10-23 16:19:09 UTC (buildkit.dockerfile.v0)COPY /application/extracted/spring-boot-loader/ ./ # buildkit
2026-10-23 16:19:09 UTC (buildkit.dockerfile.v0)COPY /application/extracted/snapshot-dependencies/ ./ # buildkit
2026-10-23 16:19:10 UTC (buildkit.dockerfile.v0)COPY /application/extracted/application/ ./ # buildkit
2026-10-23 16:19:10 UTC (buildkit.dockerfile.v0)ENV JVM_OPTS= HALO_WORK_DIR=/root/.halo2 SPRING_CONFIG_LOCATION=optional:classpath:/;optional:file:/root/.halo2/ TZ=Asia/Shanghai
2026-10-23 16:20:09 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eu; security="$JAVA_HOME/lib/security"; blocked="$security/blocked.certs"; listing="$security/emudhra-cacerts.txt"; [ -f "$blocked" ] || { echo "CVE-2026-91403 stopgap: $blocked is missing" >&2; exit 1; }; blocked_before=$(grep -cE '^[0-9A-F]{64}$' "$blocked" || true); for fingerprint in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do grep -qx "$fingerprint" "$blocked" || printf '%s\n' "$fingerprint" >> "$blocked"; done; blocked_after=$(grep -cE '^[0-9A-F]{64}$' "$blocked"); keytool -list -v -cacerts -storepass changeit > "$listing"; awk '/^Alias name: /{alias=substr($0,13)} /^Owner: CN=emSign (Root CA - C1|ECC Root CA - C3|ECC Root CA - G3),/{print alias}' "$listing" > "$listing.remove"; while IFS= read -r alias; do keytool -delete -cacerts -storepass changeit -alias "$alias"; done < "$listing.remove"; rm -f "$listing" "$listing.remove"; trusted_emsign=$(keytool -list -cacerts -storepass changeit | grep -ci emsign || true); test "$trusted_emsign" -eq 1 || { echo "CVE-2026-91403 stopgap: expected only emSign Root CA - G1 to remain, found $trusted_emsign emSign roots" >&2; exit 1; }; echo "CVE-2026-91403 stopgap applied: $((blocked_after - blocked_before)) fingerprints added, $blocked_after blocked in total" # buildkit
2026-10-23 16:20:09 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone # buildkit
2026-10-23 16:28:01 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c java -XX:ArchiveClassesAtExit=application.jsa -Dspring.context.exit=onRefresh -jar application.jar --halo.work-dir=/tmp/halo2 && rm -rf /tmp/halo2 # buildkit
2026-10-23 16:28:01 UTC (buildkit.dockerfile.v0)EXPOSE [8090/tcp]
2026-10-23 16:28:01 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["sh" "-c" "exec java ${JVM_OPTS} -XX:SharedArchiveFile=application.jsa -jar application.jar \"$@\"" "--"]
Details
2026-10-23 16:30:00 UTC
367 MB
Labels
-
maintainerjohnniang <johnniang@foxmail.com>
-
org.opencontainers.image.created2026-10-23T16:16:22.669Z
-
org.opencontainers.image.description
-
org.opencontainers.image.licensesGPL-3.0
-
org.opencontainers.image.revision988c6372e200343895c3bf36cdb5568b31a2f0a6
-
org.opencontainers.image.sourcehttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.titlehalo-pro
-
org.opencontainers.image.urlhttps://github.com/lxware-dev/halo-pro
-
org.opencontainers.image.version2
Environment
HALO_WORK_DIR/root/.halo2
JAVA_HOME/opt/java/openjdk
JAVA_VERSIONjdk-21.0.12.1+1
JVM_OPTS LANGen_US.UTF-8
LANGUAGEen_US:en
LC_ALLen_US.UTF-8
PATH/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
SPRING_CONFIG_LOCATIONoptional:classpath:/;optional:file:/root/.halo2/
TZAsia/Shanghai
Layers
[#000] sha256:58b222a7d654928db697f09ab35f1d28b63e1b80b1af8ba0b211c6212710fe68 - 10.87% (39.9 MB)
[#001] sha256:fc8cf00cdaca93b7dc1efd035532bf98c814789c3b27840617465396585a28ca - 0.0% (389 Bytes)
[#002] sha256:a410ff377ec3126da7527d69b92c35574a9810e6a4397f417302b84380800f9c - 5.37% (19.7 MB)
[#003] sha256:04115de663a574563fbe992127d5d13c29aa56a72eba5ca05dcda20e3f98305f - 12.89% (47.3 MB)
[#004] sha256:8f1919f5cb9f5d97a10bf86185100ed094198e74e774c7fe4d1007a357e4dde6 - 0.0% (159 Bytes)
[#005] sha256:658d411462371661e0b20f40e08c84c79844adcab29c52454e8c1c33c01b0689 - 0.0% (2.41 KB)
[#006] sha256:d12a82da399dddc5b3650e4f2afb46f7a5c544bf22601b08c1e9f93650a94a54 - 0.0% (101 Bytes)
[#007] sha256:010ae4d4bb81a8176f2ddb658bbda6944a65b02ed2ad442de2f17a8b749ea34e - 40.21% (148 MB)
[#008] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#009] sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1 - 0.0% (32 Bytes)
[#010] sha256:5d1e6c7c5e74158681426378be743088d60e37dfd1f031247fb9aedb7f44723c - 21.86% (80.3 MB)
[#011] sha256:a267a8be99826abb692b30acbafed32eb5c50f304f2ac809bb666f2a98448f94 - 0.03% (98.5 KB)
[#012] sha256:79f874d2449af1ac40eee90eb2b16a0ad335287cecc2581cbafb0c2d60164c1c - 0.0% (193 Bytes)
[#013] sha256:6f239c31a171bc6cd4da1ba5ec87866a2a2656c079753dcaf56c025383887a26 - 8.77% (32.2 MB)
History
umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.9530.tar --tag 26.04
2026-10-06 20:37:54 UTC (Set entrypoint)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd
2026-10-06 20:37:54 UTC (Set default commands)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash
2026-10-06 20:37:54 UTC (Set default PATH for bare-based rock)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-06 20:37:54 UTC (Set labels)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-10-06T20:37:54.627411+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:37:54 UTC (Set annotations)umoci config --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-10-06T20:37:54.627411+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
2026-10-06 20:37:54 UTC (Add rock control metadata)umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-f769691888dfc504c4977dc89c90edab/images/.temp_layer.control_data.9530.tar
2026-10-17 00:11:49 UTC (buildkit.dockerfile.v0)ENV JAVA_HOME=/opt/java/openjdk
2026-10-17 00:11:49 UTC (buildkit.dockerfile.v0)ENV PATH=/opt/java/openjdk/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2026-10-17 00:11:49 UTC (buildkit.dockerfile.v0)ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
2026-10-17 00:11:49 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; apt-get update; DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends curl wget gnupg fontconfig ca-certificates p11-kit tzdata locales ; echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen; locale-gen en_US.UTF-8; rm -rf /var/lib/apt/lists/* # buildkit
2026-10-17 00:11:49 UTC (buildkit.dockerfile.v0)ENV JAVA_VERSION=jdk-21.0.12.1+1
2026-10-17 00:15:25 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; ARCH="$(dpkg --print-architecture)"; case "${ARCH}" in amd64) ESUM='2413149700df0f7d440500a84a8f764c535f21e5a5e87d38328b64eec2c5b500'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_x64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; arm64) ESUM='14be1f35ebdbd1f6e8d57eb911a3ffb74d6d9aa255abc5daf2b1302002cf2cf2'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_aarch64_linux_hotspot_21.0.12.1_1.tar.gz'; ;; ppc64el) ESUM='d2f07f1d97faab23b3add1af92db402b721b5b251cedab7144fdd4b2bf2e2f13'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_ppc64le_linux_hotspot_21.0.12.1_1.tar.gz'; ;; s390x) ESUM='df43dc82a935868915a4b76227e2c63ffeb32868b608980dc67312a3d6217e1e'; BINARY_URL='https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.12.1%2B1/OpenJDK21U-jre_s390x_linux_hotspot_21.0.12.1_1.tar.gz'; ;; *) echo "Unsupported arch: ${ARCH}"; exit 1; ;; esac; wget --progress=dot:giga -O /tmp/openjdk.tar.gz ${BINARY_URL}; wget --progress=dot:giga -O /tmp/openjdk.tar.gz.sig ${BINARY_URL}.sig; export GNUPGHOME="$(mktemp -d)"; gpg --batch --keyserver keyserver.ubuntu.com --recv-keys 3B04D753C9050D9A5D343F39843C48A565F8F04B; gpg --batch --verify /tmp/openjdk.tar.gz.sig /tmp/openjdk.tar.gz; rm -rf "${GNUPGHOME}" /tmp/openjdk.tar.gz.sig; echo "${ESUM} */tmp/openjdk.tar.gz" | sha256sum -c -; mkdir -p "$JAVA_HOME"; tar --extract --file /tmp/openjdk.tar.gz --directory "$JAVA_HOME" --strip-components 1 --no-same-owner ; rm -f /tmp/openjdk.tar.gz; find "$JAVA_HOME/lib" -name '*.so' -exec dirname '{}' ';' | sort -u > /etc/ld.so.conf.d/docker-openjdk.conf; ldconfig; java -Xshare:dump; # buildkit
2026-10-17 00:15:26 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eux; echo "Verifying install ..."; echo "java --version"; java --version; echo "Complete." # buildkit
2026-10-17 00:15:26 UTC (buildkit.dockerfile.v0)COPY --chmod=755 entrypoint.sh /__cacert_entrypoint.sh # buildkit
2026-10-17 00:15:26 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["/__cacert_entrypoint.sh"]
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)LABEL maintainer=johnniang <johnniang@foxmail.com>
2026-10-23 16:17:20 UTC (buildkit.dockerfile.v0)WORKDIR /application
2026-10-23 16:19:33 UTC (buildkit.dockerfile.v0)COPY /application/extracted/dependencies/ ./ # buildkit
2026-10-23 16:19:33 UTC (buildkit.dockerfile.v0)COPY /application/extracted/spring-boot-loader/ ./ # buildkit
2026-10-23 16:19:33 UTC (buildkit.dockerfile.v0)COPY /application/extracted/snapshot-dependencies/ ./ # buildkit
2026-10-23 16:19:34 UTC (buildkit.dockerfile.v0)COPY /application/extracted/application/ ./ # buildkit
2026-10-23 16:19:34 UTC (buildkit.dockerfile.v0)ENV JVM_OPTS= HALO_WORK_DIR=/root/.halo2 SPRING_CONFIG_LOCATION=optional:classpath:/;optional:file:/root/.halo2/ TZ=Asia/Shanghai
2026-10-23 16:20:29 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c set -eu; security="$JAVA_HOME/lib/security"; blocked="$security/blocked.certs"; listing="$security/emudhra-cacerts.txt"; [ -f "$blocked" ] || { echo "CVE-2026-91403 stopgap: $blocked is missing" >&2; exit 1; }; blocked_before=$(grep -cE '^[0-9A-F]{64}$' "$blocked" || true); for fingerprint in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do grep -qx "$fingerprint" "$blocked" || printf '%s\n' "$fingerprint" >> "$blocked"; done; blocked_after=$(grep -cE '^[0-9A-F]{64}$' "$blocked"); keytool -list -v -cacerts -storepass changeit > "$listing"; awk '/^Alias name: /{alias=substr($0,13)} /^Owner: CN=emSign (Root CA - C1|ECC Root CA - C3|ECC Root CA - G3),/{print alias}' "$listing" > "$listing.remove"; while IFS= read -r alias; do keytool -delete -cacerts -storepass changeit -alias "$alias"; done < "$listing.remove"; rm -f "$listing" "$listing.remove"; trusted_emsign=$(keytool -list -cacerts -storepass changeit | grep -ci emsign || true); test "$trusted_emsign" -eq 1 || { echo "CVE-2026-91403 stopgap: expected only emSign Root CA - G1 to remain, found $trusted_emsign emSign roots" >&2; exit 1; }; echo "CVE-2026-91403 stopgap applied: $((blocked_after - blocked_before)) fingerprints added, $blocked_after blocked in total" # buildkit
2026-10-23 16:20:29 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c ln -sf /usr/share/zoneinfo/$TZ /etc/localtime && echo $TZ > /etc/timezone # buildkit
2026-10-23 16:30:00 UTC (buildkit.dockerfile.v0)RUN /bin/sh -c java -XX:ArchiveClassesAtExit=application.jsa -Dspring.context.exit=onRefresh -jar application.jar --halo.work-dir=/tmp/halo2 && rm -rf /tmp/halo2 # buildkit
2026-10-23 16:30:00 UTC (buildkit.dockerfile.v0)EXPOSE [8090/tcp]
2026-10-23 16:30:00 UTC (buildkit.dockerfile.v0)ENTRYPOINT ["sh" "-c" "exec java ${JVM_OPTS} -XX:SharedArchiveFile=application.jsa -jar application.jar \"$@\"" "--"]
Delete Tag
Please be careful as this will not just delete the reference but also the actual content!
For example when you have latest and v1.2.3 both pointing to the same image
the deletion of latest will also permanently remove v1.2.3.