marcoallegretti/karapace
1
0
Fork 0
mirror of https://github.com/marcoallegretti/karapace.git synced 2026-03-26 21:43:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

pre-publish fixes: pin SBOM tool version, remove hardcoded paths, fix changelog

Browse source 
- Pin cargo-cyclonedx@0.5.5 in scripts/generate-sbom.sh (matches CI)
- Remove hardcoded /home/lateuf paths from .cargo/config.toml
- Remove stale 'quick' command reference from CHANGELOG 0.1.0
This commit is contained in:
Marco Allegretti 2026-02-22 19:36:26 +01:00
parent bb03d3adad
commit abb89d298a
3 changed files with 10 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
.cargo/config.toml
View file

@ -11,11 +11,12 @@
[env] [env]
SOURCE_DATE_EPOCH = "0" SOURCE_DATE_EPOCH = "0"
[build] # [build]
# Remap common local paths in release builds. # Path remapping for local dev builds is optional.
# These are best-effort for local dev — CI RUSTFLAGS override this entirely. # CI RUSTFLAGS override build.rustflags entirely.
# The $HOME/.cargo/registry/src prefix covers most dependency crate paths. # strip = true in profile.release removes debug paths from binaries.
rustflags = [ # Uncomment and adjust for your system if you want local path remapping:
"--remap-path-prefix", "/home/lateuf/.cargo/registry/src=crate", # rustflags = [
"--remap-path-prefix", "/home/lateuf/Projects/Karapace=src", # "--remap-path-prefix", "/home/YOU/.cargo/registry/src=crate",
] # "--remap-path-prefix", "/home/YOU/Projects/Karapace=src",
# ]

1
CHANGELOG.md
View file

@ -57,7 +57,6 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
- **Lock file v2** — resolved packages with pinned versions, base image content digest (not tag), dual verification (integrity + manifest intent). - **Lock file v2** — resolved packages with pinned versions, base image content digest (not tag), dual verification (integrity + manifest intent).
- **Content-addressable store** — blake3 hashing, atomic writes (NamedTempFile + persist), integrity verification on read, reference counting, garbage collection with signal cancellation. - **Content-addressable store** — blake3 hashing, atomic writes (NamedTempFile + persist), integrity verification on read, reference counting, garbage collection with signal cancellation.
- **CLI commands** — `build`, `rebuild`, `enter`, `exec`, `destroy`, `stop`, `freeze`, `archive`, `list`, `inspect`, `diff`, `snapshots`, `commit`, `restore`, `gc`, `verify-store`, `push`, `pull`, `rename`, `completions`, `man-pages`, `doctor`, `migrate`. - **CLI commands** — `build`, `rebuild`, `enter`, `exec`, `destroy`, `stop`, `freeze`, `archive`, `list`, `inspect`, `diff`, `snapshots`, `commit`, `restore`, `gc`, `verify-store`, `push`, `pull`, `rename`, `completions`, `man-pages`, `doctor`, `migrate`.
- **`quick` command** — one-step environment creation for casual users (`karapace quick rolling -p git,curl --enter`). Generates a real manifest + lock file, preserving determinism while matching Distrobox-like simplicity.
- **Example manifests** — `examples/minimal.toml`, `examples/dev.toml`, `examples/gui-dev.toml`, `examples/ubuntu-dev.toml`, `examples/rust-dev.toml` for common use cases. - **Example manifests** — `examples/minimal.toml`, `examples/dev.toml`, `examples/gui-dev.toml`, `examples/ubuntu-dev.toml`, `examples/rust-dev.toml` for common use cases.
- **Multi-distro image support** — openSUSE Tumbleweed/Leap, Ubuntu (20.04–24.10), Debian (Bookworm/Trixie/Sid), Fedora (40–42), Arch Linux, custom URLs. - **Multi-distro image support** — openSUSE Tumbleweed/Leap, Ubuntu (20.04–24.10), Debian (Bookworm/Trixie/Sid), Fedora (40–42), Arch Linux, custom URLs.
- **Runtime backends** — user namespace (`unshare` + `fuse-overlayfs` + `chroot`), OCI (`crun`/`runc`/`youki`), mock (for testing). - **Runtime backends** — user namespace (`unshare` + `fuse-overlayfs` + `chroot`), OCI (`crun`/`runc`/`youki`), mock (for testing).

2
scripts/generate-sbom.sh
View file

@ -3,7 +3,7 @@ set -euo pipefail
command -v cargo-cyclonedx >/dev/null 2>&1 || { command -v cargo-cyclonedx >/dev/null 2>&1 || {
echo "Installing cargo-cyclonedx..." echo "Installing cargo-cyclonedx..."
cargo install cargo-cyclonedx --locked cargo install cargo-cyclonedx@0.5.5 --locked
} }
cargo cyclonedx --format json --output-prefix karapace cargo cyclonedx --format json --output-prefix karapace