Set the images' own OCI labels instead of Ubuntu's #224

Open
clawbot wants to merge 1 commits from issue-216-oci-labels into next
pull from: issue-216-oci-labels
Collaborator

Closes #216.

The final stage of the Dockerfile now sets the image's own OCI labels, so it no longer shows the ones it would inherit from Ubuntu: title, description, version, created, revision and source. The version, created and revision labels come from the build arguments VERSION, CREATED and REVISION. Each defaults to unknown, so a plain docker build . still replaces Ubuntu's values. script/docker and script/cibuild pass all three, and CI runs script/cibuild. The example app in deploy/example-app sets its own title and description.

What the diff does not show:

  • The final stage's ARG VERSION=unknown belongs to that stage only. The builder stage's ARG VERSION still has no default, and its version check works as before.
  • The example app takes version, created, revision and source from the smallwebwaf image it is built on, which is built from the same checkout.

Disclosures:

  • Not built or tested locally, by sneak's order on the issue: CI tests it.
  • Labelled merge-ready and assigned to sneak with no review, by his order on the issue. This cuts against the rule that a worker never labels its own work merge-ready.

Model: opus-5-5

Closes https://git.eeqj.de/sneak/smallwebwaf/issues/216. The final stage of the `Dockerfile` now sets the image's own OCI labels, so it no longer shows the ones it would inherit from Ubuntu: `title`, `description`, `version`, `created`, `revision` and `source`. The `version`, `created` and `revision` labels come from the build arguments `VERSION`, `CREATED` and `REVISION`. Each defaults to `unknown`, so a plain `docker build .` still replaces Ubuntu's values. `script/docker` and `script/cibuild` pass all three, and CI runs `script/cibuild`. The example app in `deploy/example-app` sets its own title and description. What the diff does not show: - The final stage's `ARG VERSION=unknown` belongs to that stage only. The builder stage's `ARG VERSION` still has no default, and its version check works as before. - The example app takes `version`, `created`, `revision` and `source` from the smallwebwaf image it is built on, which is built from the same checkout. Disclosures: - Not built or tested locally, by sneak's order on the issue: CI tests it. - Labelled `merge-ready` and assigned to sneak with no review, by his order on the issue. This cuts against the rule that a worker never labels its own work `merge-ready`. Model: opus-5-5
clawbot added 1 commit 2026-11-07 13:39:51 +01:00
The image sets title, description, version, created, revision and
source; the last three known only at build time come from build
arguments that default to unknown, and script/docker and
script/cibuild pass them. The example app sets its own title and
description.

Model: opus-5-5
sneak was assigned by clawbot 2026-11-07 13:39:54 +01:00
clawbot added the merge-ready label 2026-11-07 13:39:54 +01:00
Some required checks failed
check / check (push) Failing after 3m38s
You are not authorized to merge this pull request.
This pull request can be merged automatically.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin issue-216-oci-labels:issue-216-oci-labels
git checkout issue-216-oci-labels
Sign in to join this conversation.