Brad Ison 6cf07caaf6 [misc] Build the upload server from source, nonroot on Chainguard (#7663) ...

upload-server/Dockerfile only packaged the goreleaser-built binary, so
the image could not be built from a checkout.  It is now a multi-stage
build on Chainguard static, running as the nonroot user (uid 65532),
with a VARIANT=debug build arg that swaps in busybox for a shell.

The goreleaser packaging file moves unchanged to Dockerfile.release and
.goreleaser.yaml points at it, so the published netbirdio/upload image
stays as it was: distroless and root.

The bases are pinned by digest, since Chainguard publishes only :latest
for free.  A Dependabot docker entry for /upload-server moves them
weekly, leaving the release base alone and holding golang to patch
updates.

2026-09-25 12:15:59 +02:00

..

DISCUSSION_TEMPLATE

chores: updated discussions and issues templates (#6073)

2026-05-05 07:53:01 -07:00

ISSUE_TEMPLATE

chores: updated discussions and issues templates (#6073)

2026-05-05 07:53:01 -07:00

workflows

[misc, android] Build and lint the mobile Go code in CI (#7641)

2026-09-25 10:21:20 +02:00

dependabot.yml

[misc] Build the upload server from source, nonroot on Chainguard (#7663)

2026-09-25 12:15:59 +02:00

FUNDING.yml

Create FUNDING.yml (#2814)

2024-10-30 17:25:02 +01:00

pull_request_template.md

[misc] update contributing guide (#7009)

2026-07-31 17:15:39 +02:00