No description
- Makefile 37.3%
- Shell 37.2%
- Dockerfile 25.5%
| Filename | Latest commit message | Latest commit date |
|---|---|---|
The step only runs git config/fetch/tag, so it does not need Red Hat's pipelines-git-init image. Switch to the repo's own base image, which already ships bash and git 2.55. registry.redhat.io is authenticated-only, so Renovate (which has no credentials for it) could never resolve digest updates and reported "Could not determine new digest" on the Dependency Dashboard. The image was also pinned digest-only with no tag, so Renovate fell back to looking up "latest", which this Red Hat repo does not publish -- meaning credentials alone would not have fixed it either. quay.io is anonymously pullable and already tracked by Renovate via the Containerfile, so this adds no new dependency surface and removes the cluster's pull-secret requirement for this task. Pinned to the multi-arch index digest, not the amd64 manifest, to keep the task runnable on every arch the base image publishes. Refs: Systems-8ql |
||
| .tekton | ||
| tests | ||
| .gitignore | ||
| .releaserc | ||
| .renovaterc | ||
| AGENTS.md | ||
| CHANGELOG.md | ||
| Containerfile | ||
| gpg-pqc | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
fedora-toolbox
A Fedora Toolbx container image based on Fedora 45, rebranded as a #B4mad toolbox with a few opinionated extras baked in.
Usage
toolbox create -i forgejo.b4mad.net/toolbxs/fedora-toolbox:latest
Published tags:
| Tag | Meaning |
|---|---|
:latest |
newest release |
:vX.Y.Z |
release tag (e.g. :v1.2.3) |
:vX.Y.Z-<sha> |
release pinned to the exact commit that built it — use this for reproducible downstream FROM pins |
What's added on top of quay.io/fedora/fedora-toolbox:45
eza,zsh,chezmoi,podmanezais built from source in a separatecargobuilder stage, so the Rust toolchain never ships in the final image/etc/os-releaserebranded viaVARIANT="#B4mad Toolbox Container Image";VARIANT_IDis kept as upstreamcontainerfor tooling compatibility- OCI image labels (
org.opencontainers.image.*) wired to build-time args (BUILD_DATE,VCS_REF,VERSION) for traceability
Building locally
make help # list all targets
make build-containers # podman build → :v1.2.3-<sha>
make tag-containers # also apply :v1.2.3 and :latest
make push-containers # push all three tags to $REGISTRY
make show-container-vars
Override the registry with REGISTRY=<host> make … (default: codeberg.org).
CI/CD & releases
- Tekton Pipelines-as-Code pipelines live in
.tekton/:on-push-to-main.yaml,on-tag.yaml,repository.yaml, andtasks/ - Release versioning and
CHANGELOG.mdare automated via semantic-release (.releaserc) - Dependency updates are proposed by Renovate (
.renovaterc)
License
See LICENSE.