way/pigway-frame-flow
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 29 Wiki Activity

fix: replace vulnerable container bases and release v0.1.21
Community checks / verify (push) Skipped
Details
Verify Frame Flow / verify (push) Failing after 6m49s
Details

Browse Source
This commit is contained in:
渡口浪人
2026-10-18 19:10:00 +08:00
parent 0d691826b6
commit dec17aeb1d
24 changed files with 195 additions and 189 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/NAS.md
+4 -8
View File
@@ -128,23 +128,19 @@ all uncompressed rootfs diff IDs before loading. With the verified local tag loa
```sh
sudo env DOCKER_BUILDKIT=1 /usr/local/bin/docker compose build \
--build-arg PYTHON_BASE=python:3.14.5-slim-bookworm
--build-arg PYTHON_BASE=python:3.14.8-alpine3.24
```
This per-build override does not change global registry or network configuration.
A slow Debian CDN can be overridden only for this build, retaining APT GPG
A slow Alpine CDN can be overridden for this build, retaining APK signature
verification and changing no NAS system settings:
```sh
sudo /usr/local/bin/docker compose build --build-arg DEBIAN_MIRROR=mirrors.aliyun.com
sudo /usr/local/bin/docker compose build --build-arg ALPINE_MIRROR=mirrors.tuna.tsinghua.edu.cn
```
Optional `build-cache/debs/fonts-noto-cjk.deb` avoids a slow build-network download.
Dockerfile verifies it against SHA-256 from the GPG-authenticated APT index before use.
The cache is not a runtime mount or committed dependency, and empty-cache builds work.
Optional `build-cache/wheels/` can hold all 24 Linux AMD64/Python 3.14 wheels
Optional `build-cache/wheels/` can hold all locked Linux AMD64/Python 3.14 musllinux wheels
and `SHA256SUMS`, verified against official PyPI release metadata. Builds verify
the manifest and use pip `--no-index`; incomplete caches fail explicitly.
Build commit/time are set after dependency installation to preserve build cache.