b19/ubuntu
Watch
2
0
Fork
You've already forked ubuntu
 0
Code Issues Pull requests Projects Releases 25 Packages 1 Wiki Activity Actions
25 releases 25 tags
  • 0.25.0 663bf866cd

    0.25.0
    All checks were successful
    published / release-tag (push) Successful in 2s
    Details
    published / projectfile-is-valid (push) Successful in 4s
    Details
    published / source-is-compliant (push) Successful in 6s
    Details
    published / runner-is-ready (push) Successful in 7s
    Details
    published / source-is-secure (push) Successful in 8s
    Details
    published / projectfile-is-ok (push) Successful in 3s
    Details
    published / signing-is-ready (push) Successful in 3s
    Details
    published / source-passes-lint (push) Successful in 36s
    Details
    published / documentation-passes-lint (push) Successful in 50s
    Details
    published / image-is-built (noble, amd64) (push) Successful in 42s
    Details
    published / image-is-built (resolute, amd64) (push) Successful in 48s
    Details
    published / image-is-secure (noble, amd64) (push) Successful in 9s
    Details
    published / image-is-secure (resolute, amd64) (push) Successful in 9s
    Details
    published / container-is-verified (noble, amd64) (push) Successful in 26s
    Details
    published / container-is-verified (resolute, amd64) (push) Successful in 27s
    Details
    published / image-is-published (noble, kiota) (push) Successful in 8s
    Details
    published / image-is-published (resolute, kiota) (push) Successful in 9s
    Details
    published / image-is-published (noble, dockerhub) (push) Successful in 33s
    Details
    published / image-is-published (resolute, dockerhub) (push) Successful in 46s
    Details
    published / release-is-published (push) Successful in 1s
    Details
    published / release-notes-are-published (push) Successful in 3s
    Details
    published / published (push) Successful in 0s
    Details
    Stable

    damian-buho released this 2026-10-21 05:13:15 +00:00 | 26 commits to main since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    7 commits, 1 contributor, 1 day since 0.24.2.

    What’s new

    Compromised certificate authorities distrusted ahead of upstream

    • Certificates listed by SHA-256 fingerprint are removed from the system trust store at build time, before the distribution ships its own fix.
    • One list serves the whole image lineage, and b19-ca-distrust bundle cuts any vendored PEM bundle from it too.
    • Ships distrusting the eMudhra intermediates whose private keys can be recovered (October 2026), together with their cross-signs and roots.
    • Downstream images add fingerprints with one variable or one file, and B19_CA_DISTRUST_ENABLED=false turns the cut off. How-to

    Features

    • security: distrust CA certificates by SHA-256 fingerprint (810ada2)

    Bug fixes

    • security: keep bundle ownership when ca-distrust rewrites it as root (0919a5d)

    Installation

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/b19-ubuntu:0.25.0

    This release also publishes the 0.25 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/b19/ubuntu:0.25.0

    Usage

    Build on top of this image:

    FROM damianbuho/b19-ubuntu:0.25.0

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/b19-ubuntu@sha256:b804eea9f2583d7082761653b62aa87e05bda3dd1dc0a2ec069370d5b45802b9
docker pull kiota.ch/b19/ubuntu@sha256:b804eea9f2583d7082761653b62aa87e05bda3dd1dc0a2ec069370d5b45802b9
    Platform Digest Size
    linux/amd64 sha256:47f1766b2353651085cbb1ca33d7422ccc0d0d1fb3350b835e01eb85293e23db 85.7 MB

    Sizes are compressed layer bytes as stored in the registry.

    Verify

    Check that what you downloaded is what this project published.

    Container image

    The signature proves this project’s CI built and pushed the image.

    COSIGN_KEY=https://kiota.ch/damian-buho/metadata/raw/branch/main/keys/ci-cosign-key.pub
cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true docker.io/damianbuho/b19-ubuntu@sha256:b804eea9f2583d7082761653b62aa87e05bda3dd1dc0a2ec069370d5b45802b9
cosign verify --key "$COSIGN_KEY" --insecure-ignore-tlog=true kiota.ch/b19/ubuntu@sha256:b804eea9f2583d7082761653b62aa87e05bda3dd1dc0a2ec069370d5b45802b9

    Full changes: https://kiota.ch/b19/ubuntu/compare/0.24.2...0.25.0

    Downloads