0 Fork 0

Files

T

check / check (push) Waiting to run

Details

Rename discriminator to waf everywhere (closes #312 )

The command is now `sww waf`, and the package is `internal/waf`. Types,
functions, files, tests, comments, docs, the Dockerfile, the runit
script, `script/`, compose examples, the log field `waf_line` and the
`X-From-Waf` test header follow. No behaviour changes, and no setting
changes name: rproxy already finds the waf through `SWRP_WAF_BACKEND`.

Done with one `sed -i` (Discriminator and DISCRIMINATOR to WAF,
discriminator to waf) over the files `git grep -i discriminator`
listed, as sneak allowed for this rename, then `git mv` for the
package and files.

Model: opus-5-5

2026-11-11 00:41:32 +00:00

1.5 KiB

Raw Blame History

What the image holds

The contents of the smallwebwaf image, and how each part is pinned. The image runs rproxy by default, or waf with SWW_COMMAND=waf. "Deployment" in SPEC.md says why each part is there and why it is pinned that way.

Ubuntu 26.04 LTS, pinned by digest.
ca-certificates, nix-bin and runit from Ubuntu's archive.
Nix, with nixpkgs nixos-26.05.11045.774debe7a0d1 set up for root as nixpkgs. No Nix daemon; build-users-group = in /etc/nix/nix.conf. Root's Nix profile, /nix/var/nix/profiles/default/bin, last on the PATH. Unpacked, nixpkgs takes about 500 MiB.
runsvinit as the entrypoint, built from github.com/peterbourgon/runsvinit at a fixed commit hash.
The sww binary, and the user sww (uid and gid 65532).
The service directory /etc/service/sww, with the run script share/sww.run.
/var/lib/sww for waf's state files, and /etc/sww/rules.d with the default rule file share/rules.d/00-default.rules.
EXPOSE 8080, and the HEALTHCHECK that runs sww healthcheck.

Pins

Ubuntu's packages are not pinned: they come from the live archive, whose packages change with every update.
nixpkgs: the release file nixexprs.tar.xz of nixos-26.05.11045.774debe7a0d1 on releases.nixos.org, named with its SHA-256 hash.
runsvinit: the archived repository, unchanged since 2015, at its last commit (b4b2c78, eight commits after v2.0.0), by commit hash, with a go.mod the build writes.
The Go image that builds sww: by digest.

1.5 KiB Raw Blame History

What the image holds

Contents

Pins

1.5 KiB

Raw Blame History