feat(deploy): run v0.1.2 as non-root #5

2026-09-30T11:44:16Z

2026-09-30 11:44:16 +00:00

Prepare v0.1.2 with a UID/GID 1000 ARM64 image, release-gated non-root and writable-data smoke checks, and a hardened k3s Kustomize base.

Verification: Ruff; pytest (84 passed, 4 skipped); dashboard HTTP smoke; DB safety smoke; strict Kubernetes 1.30 schema validation; ARM64 read-only-root UID/GID/data/MCP/Dashboard image smoke; independent security and logic review.

Prepare v0.1.2 with a UID/GID 1000 ARM64 image, release-gated non-root and writable-data smoke checks, and a hardened k3s Kustomize base. Verification: Ruff; pytest (84 passed, 4 skipped); dashboard HTTP smoke; DB safety smoke; strict Kubernetes 1.30 schema validation; ARM64 read-only-root UID/GID/data/MCP/Dashboard image smoke; independent security and logic review.

gitea-release-agent added 1 commit 2026-09-30 11:44:19 +00:00

[verified] feat(deploy): run v0.1.2 as non-root ee3e3852ee

gitea-release-agent merged commit 7bea8b368e into main

2026-09-30 11:45:02 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: jsfamily/jarca-ledger-mcp#5