hsiegeln 7e7bd06bca docs(handoff): runtime-base image hardening — Chainguard JRE switch for SaaS team ...

One-line FROM swap from eclipse-temurin:21-jre-alpine to
cgr.dev/chainguard/jre:openjdk-21 plus deletion of the dead ENTRYPOINT.
Wins: glibc (fixes hidden Netty/Snappy/JNI compatibility risk on musl),
daily rebuilds, signed images + SBOM, near-zero baseline CVEs by design.
No cameleer-server orchestrator change required; runtime contract
unchanged. Distroless and jlink/scratch covered as optional/not-recommended
follow-ups with rationale.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-28 09:34:09 +02:00

.claude/rules

feat(runtime): capture loader logs in failure exceptions; add LoaderHardeningIT regression guard

2026-04-27 23:51:25 +02:00

.gitea

ci(loader): build & push cameleer-runtime-loader image only when its sources change

2026-04-27 23:13:25 +02:00

.planning

docs(triage): close-out follow-up — all 12 parked failures resolved, 560/560 green

2026-04-21 23:45:59 +02:00

.superpowers/brainstorm

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

audit

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

cameleer-license-api

refactor(license): extract cameleer-license-api module from server-core

2026-04-26 20:06:52 +02:00

cameleer-license-minter

refactor(license): extract cameleer-license-api module from server-core

2026-04-26 20:06:52 +02:00

cameleer-runtime-loader

fix(loader): chown /app/jars to loader so volume init gives wget write perms

2026-04-27 23:34:03 +02:00

cameleer-server-app

feat(runtime): capture loader logs in failure exceptions; add LoaderHardeningIT regression guard

2026-04-27 23:51:25 +02:00

cameleer-server-core

feat(runtime): init-container loader pattern + withUsernsMode (#152 hardening close)

2026-04-27 16:06:56 +02:00

deploy

fix(auth): upsert UI login user_id unprefixed (drop docker seeder workaround)

2026-04-20 18:26:03 +02:00

docs

docs(handoff): runtime-base image hardening — Chainguard JRE switch for SaaS team

2026-04-28 09:34:09 +02:00

examples

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

org/eclipse/elk

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

screenshots

revert: temporarily revert EIP_CIRCUIT_BREAKER compound rendering

2026-03-29 18:15:10 +02:00

ui

feat(ui): signed-out splash + prompt=login on OIDC redirect

2026-04-27 11:59:04 +02:00

.dockerignore

Add Docker build, K8s manifests, and CI/CD deploy pipeline

2026-03-12 19:01:39 +01:00

.gitattributes

Scaffold cameleer3-server project structure

2026-03-11 10:06:17 +01:00

.gitignore

chore: track .claude/rules/ and add self-maintenance instruction

2026-04-16 09:26:53 +02:00

AGENTS.md

chore(gitnexus): sync indexed symbol count

2026-04-24 09:20:25 +02:00

CLAUDE.md

docs(rules): document ArtifactDownloadController + storage abstraction; drop JARDOCKERVOLUME

2026-04-27 16:52:20 +02:00

docker-compose.yml

fix(auth): upsert UI login user_id unprefixed (drop docker seeder workaround)

2026-04-20 18:26:03 +02:00

docker-entrypoint.sh

fix: import /certs/ca.pem into JVM truststore at startup

2026-04-11 11:31:26 +02:00

Dockerfile

chore(docker): full-stack docker-compose mirroring deploy/ k8s manifests

2026-04-20 15:52:24 +02:00

HOWTO.md

docs: correct loader-network reachability claim; refresh HOWTO env vars

2026-04-27 17:13:56 +02:00

openapi.json

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

pom.xml

refactor(license): extract cameleer-license-api module from server-core

2026-04-26 20:06:52 +02:00

UI_FINDINGS.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

UI-CONSISTENCY-AUDIT.md

chore: rename cameleer3 to cameleer

2026-04-15 15:28:42 +02:00

Description

Observability server for Cameleer agents

26 MiB

Languages

Java 64.2%

TypeScript 28.1%

HTML 4.8%

CSS 2.7%