From 436ba6c6acd0b2aa21b75384e7c70e62fe713e18 Mon Sep 17 00:00:00 2001 From: erikaheidi Date: Wed, 15 Nov 2023 00:30:03 +0000 Subject: [PATCH] Update Images Reference Signed-off-by: GitHub --- autodocs/changelog.md | 16 ++++ .../reference/aws-cli/tags_history.md | 4 +- .../aws-efs-csi-driver/tags_history.md | 4 +- .../reference/crane/tags_history.md | 4 +- .../istio-install-cni/tags_history.md | 4 +- .../reference/istio-operator/tags_history.md | 4 +- .../reference/istio-pilot/tags_history.md | 4 +- .../reference/istio-proxy/tags_history.md | 4 +- .../slim-toolkit-debug/tags_history.md | 2 +- .../reference/temporal-ui-server/_index.md | 37 ++++++++ .../temporal-ui-server/image_specs.md | 73 ++++++++++++++++ .../temporal-ui-server/provenance_info.md | 85 +++++++++++++++++++ .../temporal-ui-server/tags_history.md | 30 +++++++ 13 files changed, 256 insertions(+), 15 deletions(-) create mode 100644 content/chainguard/chainguard-images/reference/temporal-ui-server/_index.md create mode 100644 content/chainguard/chainguard-images/reference/temporal-ui-server/image_specs.md create mode 100644 content/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info.md create mode 100644 content/chainguard/chainguard-images/reference/temporal-ui-server/tags_history.md diff --git a/autodocs/changelog.md b/autodocs/changelog.md index b53f110549..2571eb5896 100755 --- a/autodocs/changelog.md +++ b/autodocs/changelog.md @@ -1,3 +1,19 @@ +# 2023-11-15 +New images added: + +- temporal-ui-server + +Updated Docs: + +- aws-cli/tags_history.md +- aws-efs-csi-driver/tags_history.md +- crane/tags_history.md +- istio-install-cni/tags_history.md +- istio-operator/tags_history.md +- istio-pilot/tags_history.md +- istio-proxy/tags_history.md +- slim-toolkit-debug/tags_history.md + # 2023-11-14 New images added: diff --git a/content/chainguard/chainguard-images/reference/aws-cli/tags_history.md b/content/chainguard/chainguard-images/reference/aws-cli/tags_history.md index 061086fe1e..c796260bdd 100644 --- a/content/chainguard/chainguard-images/reference/aws-cli/tags_history.md +++ b/content/chainguard/chainguard-images/reference/aws-cli/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest` | November 13th | `sha256:ac13193c54a01984f31b817705fb2ac82131003010eead26fc775de0fd199fbf` | -| `latest-dev` | November 13th | `sha256:bb9e7c6b1bbb51bd6ee5de1e4926ae6383072ed9eebe5888e697ef7e0a9e6c9f` | +| `latest-dev` | November 14th | `sha256:e31a2eb8eabb67068ec633958c70f7b2a078367513c7836ad3fc59699d108219` | +| `latest` | November 14th | `sha256:f844e5afc4adee1ba7f11efac57df1c4934f8f25450b44cd8c424b70bd807d86` | diff --git a/content/chainguard/chainguard-images/reference/aws-efs-csi-driver/tags_history.md b/content/chainguard/chainguard-images/reference/aws-efs-csi-driver/tags_history.md index 301567abc1..85eeafdf9e 100644 --- a/content/chainguard/chainguard-images/reference/aws-efs-csi-driver/tags_history.md +++ b/content/chainguard/chainguard-images/reference/aws-efs-csi-driver/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 13th | `sha256:a62e172f95293c273d657f7c7137b460a3f388a6b8b4197a9da7ad5375292d8b` | -| `latest` | November 13th | `sha256:cb75df78f0e86de592f26dc1aa58ee2078fa4c1f11636ac89e9d26f1f51cb8a5` | +| `latest` | November 14th | `sha256:55e4296093c20c461d5821a1d7801f0eb450b8690c41120f5c34c62cb10bf643` | +| `latest-dev` | November 14th | `sha256:e37715df874b988a847bca55bd289cdc06baae726e0509387fec4f0759788d51` | diff --git a/content/chainguard/chainguard-images/reference/crane/tags_history.md b/content/chainguard/chainguard-images/reference/crane/tags_history.md index b2e3bf76a6..6dde23f76b 100644 --- a/content/chainguard/chainguard-images/reference/crane/tags_history.md +++ b/content/chainguard/chainguard-images/reference/crane/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 13th | `sha256:290ee330546639d6cece26a4676c3692b82bb3be9826ef2cfe8fc10b151c454b` | -| `latest` | November 13th | `sha256:f7e869cec68c1b03a91a1e3a9f43fd1e958e6ed11b1ab09006ac65eee7b596e5` | +| `latest-dev` | November 14th | `sha256:5f70c073cdec827c3274099b3f0be57bbc23605b6aa5e7913d551e4e50dddd72` | +| `latest` | November 14th | `sha256:d88feb459a2b98f5895e89ee54290192736e0ba63d29240e4bddd05319fa9d26` | diff --git a/content/chainguard/chainguard-images/reference/istio-install-cni/tags_history.md b/content/chainguard/chainguard-images/reference/istio-install-cni/tags_history.md index 46b5430b73..707e370d11 100644 --- a/content/chainguard/chainguard-images/reference/istio-install-cni/tags_history.md +++ b/content/chainguard/chainguard-images/reference/istio-install-cni/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 11th | `sha256:fe3bc897fdf3d892e20846097adf759f189dd9f7dfa2436d2ca7945a5500dc63` | -| `latest` | October 30th | `sha256:03bee7cc1d9aa45cc617df89cc0de6420d05f99ed85012b8f91e3c492ab086a3` | +| `latest` | November 14th | `sha256:c96f9cf5539d54843e1ddede43c8ab4a21b8cd6075f6e11fa93fe9e82ed563aa` | +| `latest-dev` | November 14th | `sha256:ebc3d45c2ce2ce820ba5820bb016e55f500cb7371ed070adb710e2be178f1bb7` | diff --git a/content/chainguard/chainguard-images/reference/istio-operator/tags_history.md b/content/chainguard/chainguard-images/reference/istio-operator/tags_history.md index e4b1f23d9e..7a42674e81 100644 --- a/content/chainguard/chainguard-images/reference/istio-operator/tags_history.md +++ b/content/chainguard/chainguard-images/reference/istio-operator/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 11th | `sha256:191d06e698eb1cf750f96474c4e28bfefae8dd9f1646e92c2d7b7d19947d1aeb` | -| `latest` | October 30th | `sha256:d62fd0342a113175390aef076bfa1aa36c6c700e4e46d2b87fc237c07e25639d` | +| `latest-dev` | November 14th | `sha256:437064623d66f21b9f1c10709ecf8941fecd74e30f489051673140fb99809f25` | +| `latest` | November 14th | `sha256:c3ddb4b4d5e7909440c19aab547b4db6633bdf5b3ef02ecd31b8ba1dd1418f7f` | diff --git a/content/chainguard/chainguard-images/reference/istio-pilot/tags_history.md b/content/chainguard/chainguard-images/reference/istio-pilot/tags_history.md index 03119b1e2e..c3a3a9c99f 100644 --- a/content/chainguard/chainguard-images/reference/istio-pilot/tags_history.md +++ b/content/chainguard/chainguard-images/reference/istio-pilot/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 11th | `sha256:4386a929c1f1c7cd665e478c96a9d0c27693bb1755524dbf206f9920f792a013` | -| `latest` | October 30th | `sha256:f301c590520691c71adb06b15787be8f8548c9e841e0f9321464247e2ff0412c` | +| `latest` | November 14th | `sha256:c9784864df0eac8c3bd46fd6b10df85df1fb6a3c36c99ca42145ecc9c84bd83a` | +| `latest-dev` | November 14th | `sha256:7ea3979b8d3f8490b56db49811a004d3904f12e35b58c1e84420531df2c41bc2` | diff --git a/content/chainguard/chainguard-images/reference/istio-proxy/tags_history.md b/content/chainguard/chainguard-images/reference/istio-proxy/tags_history.md index f8045a146d..e3ef9135de 100644 --- a/content/chainguard/chainguard-images/reference/istio-proxy/tags_history.md +++ b/content/chainguard/chainguard-images/reference/istio-proxy/tags_history.md @@ -25,6 +25,6 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |---------------|---------------|---------------------------------------------------------------------------| -| `latest-dev` | November 11th | `sha256:dc3c5fb0e6ee4b7ffd6acc61ab40cfffbaa78d6cb95753067dd818bdd62f4270` | -| `latest` | October 30th | `sha256:defcc9357747f68dd886ee6abd0cba3e7cc0cb63ff04bdebfe586762d0f6d0ad` | +| `latest` | November 14th | `sha256:bb9f115c9be6438faa963ff5a8c298ddfda6b6730c379f1cc8dfbd4ad991ceec` | +| `latest-dev` | November 14th | `sha256:436b6830775be13e12805ddf9532c5c8c0b50fb7cc7a16c77f57897c605c3c5a` | diff --git a/content/chainguard/chainguard-images/reference/slim-toolkit-debug/tags_history.md b/content/chainguard/chainguard-images/reference/slim-toolkit-debug/tags_history.md index 2cdc0299b5..a9d97d328b 100644 --- a/content/chainguard/chainguard-images/reference/slim-toolkit-debug/tags_history.md +++ b/content/chainguard/chainguard-images/reference/slim-toolkit-debug/tags_history.md @@ -25,5 +25,5 @@ Please note that digests and timestamps only change when there is a change to th | Tag (s) | Last Changed | Digest | |-----------|---------------|---------------------------------------------------------------------------| -| `latest` | November 13th | `sha256:4a924b13ecb3ad270ed47687d8ea36d39a9a4fe660bac0db31bd0fee00fbc803` | +| `latest` | November 14th | `sha256:798fa5f939e34a49931675b99ebc496222a53dff30a2cd606c3ef18058b4e568` | diff --git a/content/chainguard/chainguard-images/reference/temporal-ui-server/_index.md b/content/chainguard/chainguard-images/reference/temporal-ui-server/_index.md new file mode 100644 index 0000000000..c573bcdf1a --- /dev/null +++ b/content/chainguard/chainguard-images/reference/temporal-ui-server/_index.md @@ -0,0 +1,37 @@ +--- +title: "Image Overview: temporal-ui-server" +linktitle: "temporal-ui-server" +type: "article" +layout: "single" +description: "Overview: temporal-ui-server Chainguard Image" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +menu: + docs: + parent: "images-reference" +weight: 500 +toc: true +--- + +{{< tabs >}} +{{< tab title="Overview" active=true url="/chainguard/chainguard-images/reference/temporal-ui-server/" >}} +{{< tab title="Variants" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/image_specs/" >}} +{{< tab title="Tags History" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/tags_history/" >}} +{{< tab title="Provenance" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info/" >}} +{{}} + + + +Minimal image for temporal.io's [ui-server](https://github.com/temporalio/ui-server). + +## Get It! + +The image is available on `cgr.dev`: + +``` +docker pull cgr.dev/chainguard/temporal-ui-server:latest +``` + diff --git a/content/chainguard/chainguard-images/reference/temporal-ui-server/image_specs.md b/content/chainguard/chainguard-images/reference/temporal-ui-server/image_specs.md new file mode 100644 index 0000000000..f498463d68 --- /dev/null +++ b/content/chainguard/chainguard-images/reference/temporal-ui-server/image_specs.md @@ -0,0 +1,73 @@ +--- +title: "temporal-ui-server Image Variants" +type: "article" +unlisted: true +description: "Detailed information about the public temporal-ui-server Chainguard Image variants" +date: 2023-03-07T11:07:52+02:00 +lastmod: 2023-03-07T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 550 +toc: true +--- + +{{< tabs >}} +{{< tab title="Overview" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/" >}} +{{< tab title="Variants" active=true url="/chainguard/chainguard-images/reference/temporal-ui-server/image_specs/" >}} +{{< tab title="Tags History" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/tags_history/" >}} +{{< tab title="Provenance" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info/" >}} +{{}} + +This page shows detailed information about all public variants of the Chainguard **temporal-ui-server** Image. + +## Variants Compared +The **temporal-ui-server** Chainguard Image currently has 2 public variants: + +- `latest-dev` +- `latest` + +The table has detailed information about each of these variants. + +| | latest-dev | latest | +|--------------|--------------------------------------|--------------------------------------| +| Default User | `ui-server` | `ui-server` | +| Entrypoint | `/home/ui-server/start-ui-server.sh` | `/home/ui-server/start-ui-server.sh` | +| CMD | not specified | not specified | +| Workdir | `/home/ui-server/` | `/home/ui-server/` | +| Has apk? | yes | no | +| Has a shell? | yes | yes | + +Check the [tags history page](/chainguard/chainguard-images/reference/temporal-ui-server/tags_history/) for the full list of available tags. + +## Packages Included +The table shows package distribution across variants. + +| | latest-dev | latest | +|-------------------------------------|------------|--------| +| `apk-tools` | X | | +| `bash` | X | X | +| `busybox` | X | | +| `ca-certificates-bundle` | X | X | +| `dockerize` | X | X | +| `git` | X | | +| `glibc` | X | X | +| `glibc-locale-posix` | X | X | +| `ld-linux` | X | X | +| `libbrotlicommon1` | X | | +| `libbrotlidec1` | X | | +| `libcrypt1` | X | | +| `libcrypto3` | X | | +| `libcurl-openssl4` | X | | +| `libexpat1` | X | | +| `libnghttp2-14` | X | | +| `libpcre2-8-0` | X | | +| `libssl3` | X | | +| `ncurses` | X | X | +| `ncurses-terminfo-base` | X | X | +| `openssl-config` | X | | +| `temporal-ui-server` | X | X | +| `temporal-ui-server-oci-entrypoint` | X | X | +| `wolfi-baselayout` | X | X | +| `zlib` | X | | + diff --git a/content/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info.md b/content/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info.md new file mode 100644 index 0000000000..abfa5fd82c --- /dev/null +++ b/content/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info.md @@ -0,0 +1,85 @@ +--- +title: "Provenance Information for temporal-ui-server Images" +type: "article" +unlisted: true +description: "Provenance information for temporal-ui-server Chainguard Image" +date: 2022-11-01T11:07:52+02:00 +lastmod: 2022-11-01T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 600 +toc: true +--- + +{{< tabs >}} +{{< tab title="Overview" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/" >}} +{{< tab title="Variants" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/image_specs/" >}} +{{< tab title="Tags History" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/tags_history/" >}} +{{< tab title="Provenance" active=true url="/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info/" >}} +{{}} + +All Chainguard Images contain verifiable signatures and high-quality SBOMs (software bill of materials), features that enable users to confirm the origin of each image built and have a detailed list of everything that is packed within. + +## Verifying temporal-ui-server Image Signatures +The **temporal-ui-server** Chainguard Images are signed using Sigstore, and you can check the included signatures using `cosign`. + +The following command requires [cosign](https://docs.sigstore.dev/cosign/overview/) and [jq](https://stedolan.github.io/jq/) to be installed on your machine. It will pull detailed information about all signatures found for the provided image. + +```shell +cosign verify --certificate-oidc-issuer=https://token.actions.githubusercontent.com --certificate-identity=https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main cgr.dev/chainguard/temporal-ui-server | jq +``` + +By default, this command will fetch signatures for the `latest` tag. You can also specify the tag you want to fetch signatures for. + +## Downloading temporal-ui-server Image Attestations + +The following [attestations](https://slsa.dev/attestation-model) for the temporal-ui-server image can be obtained and verified via cosign: + +| Attestation Type | Description | +|----------------|-------------| +| `https://slsa.dev/provenance/v1` | The [SLSA 1.0](https://slsa.dev/spec/v1.0/provenance) provenance attestation contains information about the image build environment. | +| `https://apko.dev/image-configuration` | Contains the configuration used by that particular image build, including direct dependencies, user accounts, and entry point. | +| `https://spdx.dev/Document` | Contains the image SBOM (Software Bill of Materials) in SPDX format. | + + +To download an attestation, use the `cosign download attestation` command and provide both the predicate type and the build platform. For example, the following command will obtain the SBOM for the temporal-ui-server image on `unix/amd64`: + +```shell +cosign download attestation \ + --platform=linux/amd64 \ + --predicate-type=https://spdx.dev/Document \ + cgr.dev/chainguard/temporal-ui-server | jq -r .payload | base64 -d | jq .predicate +``` +By default, this command will fetch the SBOM assigned to the `latest` tag. You can also specify the tag you want to fetch the attestation from. + +To download a different attestation, replace the `--predicate-type` parameter value with the desired attestation URL identifier. + +## Verifying temporal-ui-server Image Attestations +You can use the `cosign verify-attestation` command to check the signatures of the temporal-ui-server image attestations: + +```shell +cosign verify-attestation \ +--type https://spdx.dev/Document \ +--certificate-oidc-issuer=https://token.actions.githubusercontent.com \ +--certificate-identity=https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main \ +cgr.dev/chainguard/temporal-ui-server +``` + +This will pull in the signature for the attestation specified by the `--type` parameter, which in this case is the SPDX attestation. You should get output that verifies the SBOM attestation signature in cosign's transparency log: + +``` +Verification for cgr.dev/chainguard/temporal-ui-server -- +The following checks were performed on each of these signatures: +- The cosign claims were validated +- Existence of the claims in the transparency log was verified offline +- The code-signing certificate was verified using trusted certificate authority certificates +Certificate subject: https://github.com/chainguard-images/images/.github/workflows/release.yaml@refs/heads/main +Certificate issuer URL: https://token.actions.githubusercontent.com +GitHub Workflow Trigger: schedule +GitHub Workflow SHA: da283c26829d46c2d2883de5ff98bee672428696 +GitHub Workflow Name: .github/workflows/release.yaml +GitHub Workflow Trigger chainguard-images/images +GitHub Workflow Ref: refs/heads/main +... +``` diff --git a/content/chainguard/chainguard-images/reference/temporal-ui-server/tags_history.md b/content/chainguard/chainguard-images/reference/temporal-ui-server/tags_history.md new file mode 100644 index 0000000000..d8c5d14991 --- /dev/null +++ b/content/chainguard/chainguard-images/reference/temporal-ui-server/tags_history.md @@ -0,0 +1,30 @@ +--- +title: "temporal-ui-server Image Tags History" +type: "article" +unlisted: true +description: "Image Tags and History for the temporal-ui-server Chainguard Image" +date: 2023-06-22T11:07:52+02:00 +lastmod: 2023-06-22T11:07:52+02:00 +draft: false +tags: ["Reference", "Chainguard Images", "Product"] +images: [] +weight: 700 +toc: true +--- + +{{< tabs >}} +{{< tab title="Overview" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/" >}} +{{< tab title="Variants" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/image_specs/" >}} +{{< tab title="Tags History" active=true url="/chainguard/chainguard-images/reference/temporal-ui-server/tags_history/" >}} +{{< tab title="Provenance" active=false url="/chainguard/chainguard-images/reference/temporal-ui-server/provenance_info/" >}} +{{}} + +The following table contains the most recent tags and digests that can be used to pin your Dockerfile to a specific build of this image. Check our guide on [Using the Tag History API](/chainguard/chainguard-images/using-the-tag-history-api/) for information on how to fetch all tags from an image and how to pin your Dockerfile to a specific digest. + +Please note that digests and timestamps only change when there is a change to the image, even though images are rebuilt every night. The "Last Changed" column indicates when the image was last modified, and doesn't always reflect the latest build timestamp. For more information about how our reproducible builds work, please refer to [this blog post](https://www.chainguard.dev/unchained/reproducing-chainguards-reproducible-image-builds). + +| Tag (s) | Last Changed | Digest | +|---------------|---------------|---------------------------------------------------------------------------| +| `latest-dev` | November 14th | `sha256:dc5042be5c0efe39fdb7cc2a35d2a2f57a7f498905ef87ceb2949a650ef6c06f` | +| `latest` | November 14th | `sha256:1240a90adf0f99ba8658be9c82e8cde423c4698a6d800e8b9a0cd646bfed958d` | +