Public Access
jaap-janandClaude Opus 5
8a568117df
registry-docker.dodotech.cloud/dodotech/dodossh-api, built and pushed by a third ci job
that needs the first. Gating on the tests costs a few minutes on every main commit and buys
the only thing worth having here: an image is not an artefact somebody inspects before
using it, so a red commit must not be able to produce one. Pull requests build the image
and stop, which is where a broken Dockerfile should be found.
Tags are :sha-<short> on every build, :main on main, and for a v* tag :1.2.3, :1.2 and
:latest — the last two only when the version has no prerelease suffix, since v1.3.0-rc1
sorts above v1.2.9 and would otherwise walk :latest onto somebody's server. Only sha- is
immutable, and it is the one to pin a deployment to.
No docker/* actions. The build is single-architecture, so it needs the daemon this runner
already has for the Testcontainers suites and nothing else — no buildx, no QEMU, and no
third-party action whose SHA has to be audited and re-pinned. Step outputs and secrets
reach the shell through env rather than ${{ }} interpolation, because a git tag may contain
a semicolon and interpolation is textual substitution performed before the shell parses the
line.
The image is chiseled: no shell, no package manager, uid 1654. Affordable because
Directory.Build.props already sets InvariantGlobalization, so the ICU and tzdata a normal
base carries are exactly what this product decided not to use. The cost is stated in the
Dockerfile rather than hidden — there is no HEALTHCHECK, because there is nothing to run
one with, and /healthz/ready is anonymous precisely so the orchestrator can ask instead.
Nothing migrates the schema from inside the container either; readiness fails while a
migration is pending and names it, which is the design.
And the restore that all of this depends on did not work. 7a3a521 committed lock files
carrying a net10.0/android-arm64 section into fourteen projects — written there by the
Android head's -p:RuntimeIdentifier=android-arm64 packaging build, which restores the
shared projects with a RID and updates their lock files as a side effect. Any restore
without that RID then fails NU1004 in locked mode, which is every other build there is:
`dotnet restore DodoSSH.slnx --locked-mode` has been failing for eleven projects on a clean
checkout of main since that commit. The sections are removed here and nothing else changed
— deletions only, ILLink.Tasks stays at 10.0.10.
Verified: the solution restores in locked mode, the image builds, and it runs. /healthz/live
answers 200 and /healthz/ready answers 503 naming the database it cannot reach, from a
67 MB image as uid 1654, configured entirely through DODOSSH_-prefixed variables.
The Android head's own lock file still carries the RID and is untouched, because that job
restores it separately and is outside DodoSSH.slnx. Whether its packaging step re-dirties
these fourteen on every CI run is worth a look; it is the same mechanism.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
257 lines
10 KiB
JSON
257 lines
10 KiB
JSON
{
|
|
"version": 2,
|
|
"dependencies": {
|
|
"net10.0": {
|
|
"Meziantou.Analyzer": {
|
|
"type": "Direct",
|
|
"requested": "[3.0.137, )",
|
|
"resolved": "3.0.137",
|
|
"contentHash": "48n8WsokyefLOZt2qGPpk+hjfF9rQRa7MGK+8hMS6sO22QuIDtBztfbXV7RtVfX7JKjUwDI9e06I8aeCc5XZzQ=="
|
|
},
|
|
"Microsoft.CodeAnalysis.BannedApiAnalyzers": {
|
|
"type": "Direct",
|
|
"requested": "[5.6.0, )",
|
|
"resolved": "5.6.0",
|
|
"contentHash": "Kcobt3pnOdO0A+6CKiMHZdTEluJpsfxiV20axtZdmfBQnDmiWTKPJADlgAfdTuKNAnVarrkJa0UEGwuOo91muw=="
|
|
},
|
|
"Microsoft.Data.Sqlite.Core": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "TPCs0ldm7AWqcKmp6f/Xr+14sat7hx4rHfRlS4RgCURBH2thEWbAKEyX7cCWr63zVJVOJIJZTg2cBiUXa8ys6g==",
|
|
"dependencies": {
|
|
"SQLitePCLRaw.core": "2.1.11"
|
|
}
|
|
},
|
|
"Microsoft.EntityFrameworkCore.Abstractions": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "bOzrFCl6uZCjaSh2bG1ToRQRdx+iXvxosCg9hFyG9OWeAzOFI4xev9OqKeWfKf/kAHyox2JnbcvLVf2ceA7sqA=="
|
|
},
|
|
"Microsoft.EntityFrameworkCore.Analyzers": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "2gLDordUCGf3aNOOuqtTbP5mxhiP9nk6TnvGiE3RnqT891O+Zf/qKu1PIREubs1M16A0SImr4vULBfU5BTDs1Q=="
|
|
},
|
|
"Microsoft.EntityFrameworkCore.Sqlite.Core": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "YbVWMIouzwTKBiLms8boa7xeRT88wI14R1msv3XExFk9n0/sa8nU7MwDa1CKtfLGMJs7O7QWuS9/xhcQ72AD2A==",
|
|
"dependencies": {
|
|
"Microsoft.Data.Sqlite.Core": "10.0.10",
|
|
"Microsoft.EntityFrameworkCore.Relational": "10.0.10",
|
|
"Microsoft.Extensions.Caching.Memory": "10.0.10",
|
|
"Microsoft.Extensions.Configuration.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.DependencyModel": "10.0.10",
|
|
"Microsoft.Extensions.Logging": "10.0.10",
|
|
"SQLitePCLRaw.core": "2.1.11"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Caching.Abstractions": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "4ZFBNE+jzR+CrWWlhOesnmywCW7pYKT0dxyAQRdL11yJwxe4jvcAu31eorFtEkoFeCDcUTeNssgPv2yaRRptaQ==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.Primitives": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Caching.Memory": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "N1w5H7uK6gCTnCBZAWzE0/EQYSPysij/uYwDqntqBVvBa6bjMmBKitsnEFd6yh/SX3wLm67nO6+OnZ84K+gZWg==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.Caching.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.Logging.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.Options": "10.0.10",
|
|
"Microsoft.Extensions.Primitives": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Configuration.Abstractions": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "5Vnd2I75DmZCVEjSynIdJ/0EGafgnLQwgR3t2C2/fkjx/nRG+cLwxLLdInoHeCEpkD5K4Ov/g9ZCRYrl4TRsaA==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.Primitives": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.DependencyInjection": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "ANyvsgkNBRvcJh2XLgn8veGmajf+8m0AbKK+HPWdRL1yraSNVVSmQhFntLtdz/C795jxqqup+k05cs/3jZQPOA==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "z/2xXlFw2aLGjHyEm6E0tQ+In6VfzQzTrtArbQ2c0TQE16ZbyDCMGPvaUT9I0s8rgy9sRWlU2P9waW37qV04qA=="
|
|
},
|
|
"Microsoft.Extensions.DependencyModel": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "rfZA1RjR021RPqSmIPovfz2aOd79TGqJ9BengbjnzIISOVwjLmuSDnhCMmiY/1c6iYvGolQ1iNGzkav0u11XEA=="
|
|
},
|
|
"Microsoft.Extensions.Logging": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "Tf6z5HsL0VDYRTfvsoNrTGHGheCwkTsZBA2FFh5ATJUbkAwug+FFNISJK2gjpUNemlAOoWllAK52HOWCjto3EQ==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.DependencyInjection": "10.0.10",
|
|
"Microsoft.Extensions.Logging.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.Options": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Logging.Abstractions": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "zkFxGYUvdxAvIKTyXHrmW+Sux53D4SezD9dMyZ6hrwwzPQJNuwCRy1f5W7AvYTqacEGhWF2XderRQG1OvbV8og==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Options": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "srnhnk7nE8krBiIXp71LvBmKBtraBONWSRzdjJgRv1Ko9Mp8IVNqv4vIS9hGeVteBig8aQkva9ZG+sC+o5sVcA==",
|
|
"dependencies": {
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.Primitives": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.Extensions.Primitives": {
|
|
"type": "Transitive",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "5wu/GrYVd8mG2DVUw3vFJzF+O336TyTGg/Kmcgw9bfwYhCoFiV5lR5QeEmKecJyrW4W54nMfD3p3589E8a7czQ=="
|
|
},
|
|
"dodossh.client.api": {
|
|
"type": "Project",
|
|
"dependencies": {
|
|
"DodoSSH.Client.Auth": "[1.0.0, )",
|
|
"DodoSSH.Contracts": "[1.0.0, )",
|
|
"DodoSSH.Crypto": "[1.0.0, )"
|
|
}
|
|
},
|
|
"dodossh.client.auth": {
|
|
"type": "Project"
|
|
},
|
|
"dodossh.client.domain": {
|
|
"type": "Project"
|
|
},
|
|
"dodossh.client.storage": {
|
|
"type": "Project",
|
|
"dependencies": {
|
|
"DodoSSH.Contracts": "[1.0.0, )",
|
|
"DodoSSH.Crypto": "[1.0.0, )",
|
|
"EFCore.NamingConventions": "[10.0.1, )",
|
|
"Microsoft.EntityFrameworkCore.Sqlite": "[10.0.10, )"
|
|
}
|
|
},
|
|
"dodossh.contracts": {
|
|
"type": "Project"
|
|
},
|
|
"dodossh.crypto": {
|
|
"type": "Project",
|
|
"dependencies": {
|
|
"NSec.Cryptography": "[26.4.0, )"
|
|
}
|
|
},
|
|
"EFCore.NamingConventions": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.1, )",
|
|
"resolved": "10.0.1",
|
|
"contentHash": "Xs5k8XfNKPkkQSkGmZkmDI1je0prLTdxse+s8PgTFZxyBrlrTLzTBUTVJtQKSsbvu4y+luAv8DdtO5SALJE++A==",
|
|
"dependencies": {
|
|
"Microsoft.EntityFrameworkCore": "[10.0.1, 11.0.0)",
|
|
"Microsoft.EntityFrameworkCore.Relational": "[10.0.1, 11.0.0)",
|
|
"Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.1"
|
|
}
|
|
},
|
|
"libsodium": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[1.0.22, )",
|
|
"resolved": "1.0.22",
|
|
"contentHash": "KPD9SloJFclrsjnhABu7dzWrcyYkwPbvx5l1gRSPAX/0n+OBtSiVCKtGFv4n+ecWUHU0tCG9LSSwoZZx673zBQ=="
|
|
},
|
|
"Microsoft.EntityFrameworkCore": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.10, )",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "a0V7zj/VbYP6dTdWpUgE/r2PuLKtUGe2aJ0lVKkn/wP9ZhaxUz2kQydVfvOjCv2SKxlrqdBfHhPD4Cvlf+4ffA==",
|
|
"dependencies": {
|
|
"Microsoft.EntityFrameworkCore.Abstractions": "10.0.10",
|
|
"Microsoft.EntityFrameworkCore.Analyzers": "10.0.10",
|
|
"Microsoft.Extensions.Caching.Memory": "10.0.10",
|
|
"Microsoft.Extensions.Logging": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.EntityFrameworkCore.Relational": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.10, )",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "wNonj40aZxia+GtuBiiD6ZqVh4h6y5Nje1bGdmzZ8/ui0QRsAN+S0SIrLHFCEGbG9cDbeaE40sh+Lr7o9rRs6g==",
|
|
"dependencies": {
|
|
"Microsoft.EntityFrameworkCore": "10.0.10",
|
|
"Microsoft.Extensions.Caching.Memory": "10.0.10",
|
|
"Microsoft.Extensions.Configuration.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.Logging": "10.0.10"
|
|
}
|
|
},
|
|
"Microsoft.EntityFrameworkCore.Sqlite": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[10.0.10, )",
|
|
"resolved": "10.0.10",
|
|
"contentHash": "kzg9MuQNJvZQxAU+piSkEzc7/1tpW6n1nVSGGMObu2GgxLK8Nf+6fvZundaznTZ+O2KhfPZ8HFNCzMH3PWDUmA==",
|
|
"dependencies": {
|
|
"Microsoft.EntityFrameworkCore.Sqlite.Core": "10.0.10",
|
|
"Microsoft.Extensions.Caching.Memory": "10.0.10",
|
|
"Microsoft.Extensions.Configuration.Abstractions": "10.0.10",
|
|
"Microsoft.Extensions.DependencyModel": "10.0.10",
|
|
"Microsoft.Extensions.Logging": "10.0.10",
|
|
"SQLitePCLRaw.bundle_e_sqlite3": "2.1.11",
|
|
"SQLitePCLRaw.core": "2.1.11"
|
|
}
|
|
},
|
|
"NSec.Cryptography": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[26.4.0, )",
|
|
"resolved": "26.4.0",
|
|
"contentHash": "0vsCtY5f+YgQROiWNqzgWp+l2pddfk9FkWoGV/bEo0MuEYPKlJWuoA8aOfO6qp3f+EnObKE3zSJhn1PspJeJVg==",
|
|
"dependencies": {
|
|
"libsodium": "[1.0.22, 1.0.23)"
|
|
}
|
|
},
|
|
"SQLitePCLRaw.bundle_e_sqlite3": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[2.1.12, )",
|
|
"resolved": "2.1.12",
|
|
"contentHash": "mAgscpQMLw5/nfA1Q5oJVAT29yROUo1ifZGbbTpx/lwZpSxMUGoYbKfmvdm8oXER+RzxqBmmQzeBEVKfeHv2nw==",
|
|
"dependencies": {
|
|
"SQLitePCLRaw.lib.e_sqlite3": "2.1.12",
|
|
"SQLitePCLRaw.provider.e_sqlite3": "2.1.12"
|
|
}
|
|
},
|
|
"SQLitePCLRaw.core": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[2.1.12, )",
|
|
"resolved": "2.1.12",
|
|
"contentHash": "ETpNw9DY3ckWLgRRAeCHj+GKOuPi61aeczkXhgHexUvqoZBAYg8RYESE2J7O1M7+o6QbdSEZwrw9bfqztUVWXg=="
|
|
},
|
|
"SQLitePCLRaw.lib.e_sqlite3": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[2.1.12, )",
|
|
"resolved": "2.1.12",
|
|
"contentHash": "fWi8Dbknuhgg72fWinIdjXVaqO1hHL4YBBwVLnr7e1c9TAZwJ0QE38j9syW1hwx6HaqEVTwI+O07WPdZn8Rp0w=="
|
|
},
|
|
"SQLitePCLRaw.provider.e_sqlite3": {
|
|
"type": "CentralTransitive",
|
|
"requested": "[2.1.12, )",
|
|
"resolved": "2.1.12",
|
|
"contentHash": "W3oH4XIfCzFrgUSDKHhN6N+dgzA5YHOR2VxX8GB6Qy7CyrJJgxPEG8NirgYWlPQC5P2jz2knSsexWu4tDUL33g==",
|
|
"dependencies": {
|
|
"SQLitePCLRaw.core": "2.1.12"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} |