The final stage of the Dockerfile now sets the image's own OCI labels, so it no longer shows the ones it would inherit from Ubuntu: title, description, version, created, revision and source. The version, created and revision labels come from the build arguments VERSION, CREATED and REVISION. Each defaults to unknown, so a plain docker build . still replaces Ubuntu's values. script/docker and script/cibuild pass all three, and CI runs script/cibuild. The example app in deploy/example-app sets its own title and description.
What the diff does not show:
The final stage's ARG VERSION=unknown belongs to that stage only. The builder stage's ARG VERSION still has no default, and its version check works as before.
The example app takes version, created, revision and source from the smallwebwaf image it is built on, which is built from the same checkout.
Disclosures:
Not built or tested locally, by sneak's order on the issue: CI tests it.
Labelled merge-ready and assigned to sneak with no review, by his order on the issue. This cuts against the rule that a worker never labels its own work merge-ready.
Model: opus-5-5
Closes https://git.eeqj.de/sneak/smallwebwaf/issues/216.
The final stage of the `Dockerfile` now sets the image's own OCI labels, so it no longer shows the ones it would inherit from Ubuntu: `title`, `description`, `version`, `created`, `revision` and `source`. The `version`, `created` and `revision` labels come from the build arguments `VERSION`, `CREATED` and `REVISION`. Each defaults to `unknown`, so a plain `docker build .` still replaces Ubuntu's values. `script/docker` and `script/cibuild` pass all three, and CI runs `script/cibuild`. The example app in `deploy/example-app` sets its own title and description.
What the diff does not show:
- The final stage's `ARG VERSION=unknown` belongs to that stage only. The builder stage's `ARG VERSION` still has no default, and its version check works as before.
- The example app takes `version`, `created`, `revision` and `source` from the smallwebwaf image it is built on, which is built from the same checkout.
Disclosures:
- Not built or tested locally, by sneak's order on the issue: CI tests it.
- Labelled `merge-ready` and assigned to sneak with no review, by his order on the issue. This cuts against the rule that a worker never labels its own work `merge-ready`.
Model: opus-5-5
The image sets title, description, version, created, revision and
source; the last three known only at build time come from build
arguments that default to unknown, and script/docker and
script/cibuild pass them. The example app sets its own title and
description.
Model: opus-5-5
sneak
was assigned by clawbot2026-11-07 13:39:54 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Closes #216.
The final stage of the
Dockerfilenow sets the image's own OCI labels, so it no longer shows the ones it would inherit from Ubuntu:title,description,version,created,revisionandsource. Theversion,createdandrevisionlabels come from the build argumentsVERSION,CREATEDandREVISION. Each defaults tounknown, so a plaindocker build .still replaces Ubuntu's values.script/dockerandscript/cibuildpass all three, and CI runsscript/cibuild. The example app indeploy/example-appsets its own title and description.What the diff does not show:
ARG VERSION=unknownbelongs to that stage only. The builder stage'sARG VERSIONstill has no default, and its version check works as before.version,created,revisionandsourcefrom the smallwebwaf image it is built on, which is built from the same checkout.Disclosures:
merge-readyand assigned to sneak with no review, by his order on the issue. This cuts against the rule that a worker never labels its own workmerge-ready.Model: opus-5-5
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.