Homelab
Repositories
2
 Projects
1
 Packages
19

tool-images/security (tool-security-v2026.10.16-r7612)

Published 2026-10-16 19:06:16 -05:00 by gitchegumi

Installation

docker pull git.gitchegumi.com/homelab/tool-images/security:tool-security-v2026.10.16-r7612
sha256:cc6f394a0e0a1bc77fcd748622b0314354a60c66d43258034420dad5912b4ea0

About this package

Verified security and delivery tools with the immutable workflows v1.33.0 library

Image layers

umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:rockcraft-base /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/.temp_layer.9550.tar --tag 26.04
umoci config --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 --clear=config.entrypoint --clear=config.cmd
umoci config --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 --clear=config.cmd --config.cmd /bin/bash
umoci config --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 --config.env PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
umoci config --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 --clear=config.labels --config.label org.opencontainers.image.version=26.04 --config.label org.opencontainers.image.title=ubuntu --config.label org.opencontainers.image.created=2026-09-27T10:25:52.887617+00:00 --config.label org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
umoci config --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 --clear=manifest.annotations --manifest.annotation org.opencontainers.image.version=26.04 --manifest.annotation org.opencontainers.image.title=ubuntu --manifest.annotation org.opencontainers.image.created=2026-09-27T10:25:52.887617+00:00 --manifest.annotation org.opencontainers.image.description=The Ubuntu container image maintained by Canonical Ubuntu is a Debian-based Linux operating system that runs from the desktop to the cloud, to all your internet connected things. It is the world's most popular operating system across public clouds and OpenStack clouds. It is the number one platform for containers; from Docker to Kubernetes to LXD, Ubuntu can run your containers at scale. Fast, secure and simple, Ubuntu powers millions of PCs worldwide.
umoci raw add-layer --image /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/ubuntu:26.04 /home/buildd/rockcraft-ubuntu-1b6090acdaa4d41535f88b18cf344a81/images/.temp_layer.control_data.9550.tar
LABEL org.opencontainers.image.title=Homelab Ubuntu base org.opencontainers.image.description=Minimal Ubuntu 26.04 foundation for Homelab-owned derivative images org.opencontainers.image.source=https://git.gitchegumi.com/Homelab/base-images org.opencontainers.image.documentation=https://git.gitchegumi.com/Homelab/base-images/src/branch/main/images/ubuntu/README.md org.opencontainers.image.vendor=Homelab org.opencontainers.image.version=26.04-v1 org.opencontainers.image.base.name=docker.io/library/ubuntu:26.04 org.opencontainers.image.base.digest=sha256:88a381d5b5eeb2b35d3ad70925a362c37ce569daf43ede89ff818ec20e4d3794
ADD https://security.ubuntu.com/ubuntu/pool/main/o/openssl/libssl3t64_3.5.5-1ubuntu3.7_amd64.deb /tmp/openssl-update/libssl3t64.deb # buildkit
ADD https://security.ubuntu.com/ubuntu/pool/main/o/openssl/openssl-provider-legacy_3.5.5-1ubuntu3.7_amd64.deb /tmp/openssl-update/openssl-provider-legacy.deb # buildkit
RUN /bin/sh -c dpkg -i /tmp/openssl-update/libssl3t64.deb /tmp/openssl-update/openssl-provider-legacy.deb && rm -rf /tmp/openssl-update # buildkit
COPY smoke.sh /usr/local/bin/ubuntu-smoke.sh # buildkit
RUN /bin/sh -c test "$(id -u ubuntu)" = 1000 && test "$(id -g ubuntu)" = 1000 && install -d -o ubuntu -g ubuntu /workspace && chmod 0755 /usr/local/bin/ubuntu-smoke.sh # buildkit
ENV HOME=/home/ubuntu
WORKDIR /workspace
USER 1000:1000
RUN /bin/sh -c /usr/local/bin/ubuntu-smoke.sh # buildkit
HEALTHCHECK {Test:[NONE] Interval:0s Timeout:0s StartPeriod:0s StartInterval:0s Retries:0}
CMD ["/bin/bash"]
USER 0:0
ADD https://archive.ubuntu.com/ubuntu/pool/main/o/openssl/openssl_3.5.5-1ubuntu3_amd64.deb /tmp/https-bootstrap/openssl.deb # buildkit
ADD https://archive.ubuntu.com/ubuntu/pool/main/c/ca-certificates/ca-certificates_20260223_all.deb /tmp/https-bootstrap/ca-certificates.deb # buildkit
RUN /bin/sh -c DEBIAN_FRONTEND=noninteractive dpkg -i /tmp/https-bootstrap/openssl.deb /tmp/https-bootstrap/ca-certificates.deb && rm -rf /tmp/https-bootstrap && sed -i 's|http://archive.ubuntu.com/ubuntu|https://archive.ubuntu.com/ubuntu|g; s|http://security.ubuntu.com/ubuntu|https://security.ubuntu.com/ubuntu|g' /etc/apt/sources.list.d/ubuntu.sources && apt-get update && DEBIAN_FRONTEND=noninteractive apt-get upgrade -y && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends bash bzip2 ca-certificates curl git gzip libbz2-1.0 libffi8 libgdbm6t64 libgdbm-compat4t64 liblzma5 libncursesw6 libreadline8t64 libsqlite3-0 libssl3t64 libstdc++6 libuuid1 openssh-client openssl procps tar unzip xz-utils zip zlib1g && rm -rf /var/lib/apt/lists/* # buildkit
USER 1000:1000
USER 0:0
LABEL org.opencontainers.image.title=Homelab main runner tools org.opencontainers.image.description=Non-root Ubuntu tools for reviewed Homelab build, scan, bundle and deployment jobs org.opencontainers.image.source=https://git.gitchegumi.com/Homelab/base-images org.opencontainers.image.documentation=https://git.gitchegumi.com/Homelab/base-images/src/branch/main/tools/main-runner/README.md org.opencontainers.image.vendor=Homelab org.opencontainers.image.version=26.04-tools-v1 org.opencontainers.image.base.name=git.gitchegumi.com/homelab/base-ubuntu:base-ubuntu-v2026.10.06-r6354 org.opencontainers.image.base.digest=sha256:9d4616631eba8fad103ff4a45b019163630f635c6a4ba4a2e0ea3c9dc084de61
COPY /opt/python /opt/python # buildkit
COPY /opt/action-node /opt/action-node # buildkit
COPY /opt/docker/bin/docker /usr/local/bin/docker # buildkit
COPY /out/docker-buildx /usr/local/lib/docker/cli-plugins/docker-buildx # buildkit
COPY toolchain.json /usr/local/share/homelab/toolchain.json # buildkit
COPY pip-dependencies.json /usr/local/share/homelab/pip-dependencies.json # buildkit
COPY buildx/source-lock.json /usr/local/share/homelab/buildx-source-lock.json # buildkit
COPY buildx/LICENSE /usr/local/share/homelab/licenses/buildx-namesgenerator-LICENSE # buildkit
COPY smoke.sh /usr/local/bin/runner-smoke.sh # buildkit
COPY smoke.py /usr/local/lib/homelab/runner-smoke.py # buildkit
RUN /bin/sh -c install -d -o ubuntu -g ubuntu /workspace /home/ubuntu/.cache /home/ubuntu/.docker /home/ubuntu/.local/bin && chmod 0755 /usr/local/bin/runner-smoke.sh && chmod 0644 /usr/local/lib/homelab/runner-smoke.py /usr/local/share/homelab/toolchain.json # buildkit
ENV HOME=/home/ubuntu LANG=C.UTF-8 LC_ALL=C.UTF-8 HOMELAB_RUNNER_IMAGE=main-runner PATH=/opt/python/bin:/opt/action-node/bin:/home/ubuntu/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin PYTHONDONTWRITEBYTECODE=1 PIP_DISABLE_PIP_VERSION_CHECK=1 PIP_NO_CACHE_DIR=1
WORKDIR /workspace
USER 1000:1000
RUN /bin/sh -c /usr/local/bin/runner-smoke.sh # buildkit
HEALTHCHECK {Test:[NONE] Interval:0s Timeout:0s StartPeriod:0s StartInterval:0s Retries:0}
CMD ["/bin/bash"]
USER 0:0
LABEL org.opencontainers.image.title=Homelab security tools and released library org.opencontainers.image.description=Verified security and delivery tools with the immutable workflows v1.33.0 library org.opencontainers.image.source=https://git.gitchegumi.com/Homelab/base-images org.opencontainers.image.documentation=https://git.gitchegumi.com/Homelab/base-images/src/branch/main/tools/security/README.md org.opencontainers.image.version=security-v1.33.0 org.opencontainers.image.base.name=git.gitchegumi.com/homelab/tool-images/main-runner:tool-main-runner-v2026.10.07-r6415 org.opencontainers.image.base.digest=sha256:6ea020b882475b23578c1c79e628bb7da86ce2966af3f87e7b958ace8656de4b
RUN /bin/sh -c apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends --only-upgrade curl libcurl3t64-gnutls libcurl4t64 && for package in curl libcurl3t64-gnutls libcurl4t64; do dpkg --compare-versions "$(dpkg-query -W -f='${Version}' "$package")" ge 8.18.0-1ubuntu2.8 || exit 1; done && rm -rf /var/lib/apt/lists/* # buildkit
ADD https://git.gitchegumi.com/Homelab/workflows/archive/d931629df1170ec8b141f98562474016addc778a.tar.gz /tmp/workflows.tar.gz # buildkit
COPY library.lock.json install_library.py install_toolchain.py python-overrides.json source-lock.json /tmp/security-build/ # buildkit
COPY security_runtime.py /usr/local/lib/homelab/security_runtime.py # buildkit
COPY security-runtime.sh /usr/local/bin/security-runtime # buildkit
RUN /bin/sh -c python3 /tmp/security-build/install_library.py /tmp/workflows.tar.gz /tmp/security-build/library.lock.json /opt/homelab/security && python3 /tmp/security-build/install_toolchain.py /opt/homelab/security /tmp/security-built /tmp/security-build && chmod 0755 /usr/local/bin/security-runtime && chmod -R a+rX,go-w /opt/homelab/security && rm -rf /tmp/workflows.tar.gz /tmp/security-build /root/.cache # buildkit
ENV PATH=/opt/homelab/security/pipeline-toolchain/venv/bin:/opt/homelab/security/pipeline-toolchain/bin:/opt/python/bin:/opt/action-node/bin:/home/ubuntu/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin HOMELAB_SECURITY_RUNTIME=1 PYTHONDONTWRITEBYTECODE=1
USER 1000:1000
RUN /bin/sh -c security-runtime smoke # buildkit
WORKDIR /workspace
HEALTHCHECK &{["NONE"] "0s" "0s" "0s" "0s" '\x00'}
CMD ["/bin/bash"]

Labels

Key Value
org.opencontainers.image.base.digest sha256:6ea020b882475b23578c1c79e628bb7da86ce2966af3f87e7b958ace8656de4b
org.opencontainers.image.base.name git.gitchegumi.com/homelab/tool-images/main-runner:tool-main-runner-v2026.10.07-r6415
org.opencontainers.image.created 2026-09-27T10:25:52.887617+00:00
org.opencontainers.image.description Verified security and delivery tools with the immutable workflows v1.33.0 library
org.opencontainers.image.documentation https://git.gitchegumi.com/Homelab/base-images/src/branch/main/tools/security/README.md
org.opencontainers.image.revision e262e3732e3065296458ee2c76c279e1ac27e7bb
org.opencontainers.image.source https://git.gitchegumi.com/Homelab/base-images
org.opencontainers.image.title Homelab security tools and released library
org.opencontainers.image.vendor Homelab
org.opencontainers.image.version security-v1.33.0
Details
Container
2026-10-16 19:06:16 -05:00
0
OCI / Docker
linux/amd64
Repository website
Documentation website
616 MiB
Versions (2) View all
tool-security-v2026.10.16-r7612 2026-10-16
tool-security-v2026.10.13-r6990 2026-10-12