Fimeg/RedFlag
Watch
1
0
Fork
You've already forked RedFlag
 0
Code Releases Activity

docker: carry the image builders to 1.26

Browse source 
Nothing in CI builds this file, so the from-source install path is the one place a toolchain floor can move without anyone noticing until a stranger tries it.

The minor tag lets patches arrive on their own.
This commit is contained in:
Fimeg 2026-09-03 19:58:30 -04:00
commit 74609b07e5
1 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

6
server/Dockerfile
View file

@ -15,7 +15,7 @@ RUN npx vite build
# server below. A real un-accepted vulnerability fails the build here; an offline # server below. A real un-accepted vulnerability fails the build here; an offline
# build (advisory DBs unreachable) degrades to an honest unattested posture # build (advisory DBs unreachable) degrades to an honest unattested posture
# rather than blocking an air-gapped operator. # rather than blocking an air-gapped operator.
FROM golang:1.25-bookworm AS posture-builder FROM golang:1.26-bookworm AS posture-builder
WORKDIR /src WORKDIR /src
@ -59,7 +59,7 @@ RUN rc=0; bash scripts/dep-scan.sh --posture-out /posture-build.json || rc=$?; \
printf '%s' '{"attested":false,"generated_at":0,"substrate":{},"scans":[],"exceptions":[]}' > /posture-build.json printf '%s' '{"attested":false,"generated_at":0,"substrate":{},"scans":[],"exceptions":[]}' > /posture-build.json
# Stage 1: Build server binary # Stage 1: Build server binary
FROM golang:1.25-alpine AS server-builder FROM golang:1.26-alpine AS server-builder
ARG BUILD_VERSION=dev ARG BUILD_VERSION=dev
@ -86,7 +86,7 @@ RUN echo "Building server version: $BUILD_VERSION" && \
-o redflag-server ./cmd/server/ -o redflag-server ./cmd/server/
# Stage 2: Build agent binaries for all platforms # Stage 2: Build agent binaries for all platforms
FROM golang:1.25-alpine AS agent-builder FROM golang:1.26-alpine AS agent-builder
ARG BUILD_VERSION=dev ARG BUILD_VERSION=dev