mikluko/kuberex
Watch
1
0
Fork
You've already forked kuberex
 0
Code Issues 4 Pull requests Projects Releases 3 Packages 1 Wiki Activity Actions

kuberex 0.3.0: Rex and Claude Code pinned in the image #14

Merged
mikluko merged 1 commit from image-pinned into main 2026-11-02 19:58:39 +00:00
Conversation 0 Commits 1 Files changed 9 +128 -152
mikluko commented 2026-11-02 19:53:30 +00:00
Owner

The startup install needed hostUsers: false, CAP_SYS_ADMIN and an
unconfined AppArmor profile for its overlays, and a Rex apt credential
the pod no longer needs: the Rex repository is public now. Baking the
pins in lets the pod run as rex with no capabilities on a read-only
root filesystem.

The Rex snapshot index keeps about four days of builds, so
REX_VERSION has to move at least that often for the image to keep
building; the upgrade workflow (#13) does that.

plan now runs on push: Forgejo skipped it with pin, so a CHANGELOG
push never released.

Refs #7

The startup install needed hostUsers: false, CAP_SYS_ADMIN and an unconfined AppArmor profile for its overlays, and a Rex apt credential the pod no longer needs: the Rex repository is public now. Baking the pins in lets the pod run as rex with no capabilities on a read-only root filesystem. The Rex snapshot index keeps about four days of builds, so REX_VERSION has to move at least that often for the image to keep building; the upgrade workflow (#13) does that. plan now runs on push: Forgejo skipped it with pin, so a CHANGELOG push never released. Refs #7
kuberex 0.3.0: Rex and Claude Code pinned in the image
All checks were successful
test / go (pull_request) Successful in 10s
Details
aecb857bd9
 
The startup install needed hostUsers: false, CAP_SYS_ADMIN and an
unconfined AppArmor profile for its overlays, and a Rex apt credential
the pod no longer needs: the Rex repository is public now. Baking the
pins in lets the pod run as rex with no capabilities on a read-only
root filesystem.

The Rex snapshot index keeps about four days of builds, so
REX_VERSION has to move at least that often for the image to keep
building; the upgrade workflow (#13) does that.

plan now runs on push: Forgejo skipped it with pin, so a CHANGELOG
push never released.

Refs #7
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
wayfinder:grilling
wayfinder grilling

  
wayfinder:map
wayfinder map

  
wayfinder:prototype
wayfinder prototype

  
wayfinder:research
wayfinder research

  
wayfinder:task
wayfinder task

No labels
wayfinder:grilling
wayfinder:map
wayfinder:prototype
wayfinder:research
wayfinder:task
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
mikluko/kuberex!14
No description provided.