secret

179 Commits 9 Branches 0 Tags

3 Commits

Include renames

Author	SHA1	Message	Date
clawbot	b4eed47511	Let a plain docker build pass and stamp the git version (closes #57 ) check / check (push) Failing after 20s Details The size tests skip a case whose secret needs more locked memory than RLIMIT_MEMLOCK allows: memguard panics otherwise, and a plain `docker build .` runs under an 8 MiB limit. script/cibuild still runs every case. The build stage stamps the VERSION build argument, else `git describe --tags --always`, and fails when .git is present but yields no version. `make build` stamps `git describe` too instead of the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is now the canonical copy. Model: opus-5-5	2026-10-02 10:21:22 +00:00
clawbot user clawbot	b090b3f86b	ci: add Gitea Actions workflow for make check (#21 ) check / check (push) Successful in 26s Details Adds CI workflow that runs `make check` on push/PR to main. Co-authored-by: user <user@Mac.lan guest wan> Co-authored-by: clawbot <clawbot@eeqj.de> Reviewed-on: #21 Co-authored-by: clawbot <sneak+clawbot@sneak.cloud> Co-committed-by: clawbot <sneak+clawbot@sneak.cloud>	2026-03-30 21:34:49 +02:00
sneak	377b51f2db	Add Docker support for building and running the CLI tool - Add DOCKER_HOST export to Makefile for remote Docker daemon - Create multi-stage Dockerfile: - Build stage: golang:1.24-alpine with gcc, make, git - Runtime stage: alpine with ca-certificates, gnupg - Runs as non-root 'secret' user - Add Makefile targets: - docker: build container as sneak/secret - docker-run: run container interactively - Add .dockerignore to exclude build artifacts but keep .git for potential linker flags Container includes GPG support for PGP unlockers and runs on Linux, making it suitable for cross-platform testing and deployment.	2025-07-21 22:13:19 +02:00

Author

SHA1

Message

Date

clawbot

b4eed47511

Let a plain docker build pass and stamp the git version (closes #57 )

check / check (push) Failing after 20s

Details

The size tests skip a case whose secret needs more locked memory than
RLIMIT_MEMLOCK allows: memguard panics otherwise, and a plain
`docker build .` runs under an 8 MiB limit. script/cibuild still runs
every case.

The build stage stamps the VERSION build argument, else
`git describe --tags --always`, and fails when .git is present but
yields no version. `make build` stamps `git describe` too instead of
the fixed 0.1.0. .dockerignore keeps .git/config out; script/docker is
now the canonical copy.

Model: opus-5-5

2026-10-02 10:21:22 +00:00

b090b3f86b

ci: add Gitea Actions workflow for make check (#21 )

check / check (push) Successful in 26s

Details

Adds CI workflow that runs `make check` on push/PR to main.

Co-authored-by: user <user@Mac.lan guest wan>
Co-authored-by: clawbot <clawbot@eeqj.de>
Reviewed-on: #21
Co-authored-by: clawbot <sneak+clawbot@sneak.cloud>
Co-committed-by: clawbot <sneak+clawbot@sneak.cloud>

2026-03-30 21:34:49 +02:00

sneak

377b51f2db

Add Docker support for building and running the CLI tool

- Add DOCKER_HOST export to Makefile for remote Docker daemon
- Create multi-stage Dockerfile:
  - Build stage: golang:1.24-alpine with gcc, make, git
  - Runtime stage: alpine with ca-certificates, gnupg
  - Runs as non-root 'secret' user
- Add Makefile targets:
  - docker: build container as sneak/secret
  - docker-run: run container interactively
- Add .dockerignore to exclude build artifacts but keep .git
  for potential linker flags

Container includes GPG support for PGP unlockers and runs on Linux,
making it suitable for cross-platform testing and deployment.

2025-07-21 22:13:19 +02:00