lib

Core libraries for Radroots
git clone https://radroots.dev/git/lib.git
Log | Files | Refs | README

hardened_service_targets.v1.toml (3297B)


      1 schema = "radroots-runtime-distribution"
      2 schema_version = 1
      3 owner_doc = "service-hardening-v1"
      4 runtime_registry = "registry.toml"
      5 
      6 [family]
      7 id = "radroots_runtime-family"
      8 canonical_installer_engine = "single_runtime_selected"
      9 human_install_facade = "delivery_publication_only"
     10 tooling_consumption = "shared_distribution_library"
     11 independent_runtime_versions = true
     12 version_resolution = "runtime_scoped_channel_latest"
     13 artifact_verification_required = true
     14 
     15 [channels]
     16 active = ["stable"]
     17 defined = ["stable"]
     18 
     19 [service_targets.myc]
     20 service_id = "myc"
     21 instance_support = "multiple"
     22 config_format = "toml"
     23 state_initialization = "explicit"
     24 run_state_policy = "existing_only"
     25 admin_transport = "http11_over_unix_domain_socket"
     26 admin_base_path = "/v1"
     27 admin_contract_version = 1
     28 status_surface = "local_admin_service_status_v1"
     29 operations_surface = "cached_livez_readyz_metrics"
     30 support_posture = "target"
     31 tier_1_targets = ["x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu"]
     32 
     33 [service_targets.rhi]
     34 service_id = "rhi"
     35 instance_support = "multiple"
     36 config_format = "toml"
     37 state_initialization = "explicit"
     38 run_state_policy = "existing_only"
     39 admin_transport = "http11_over_unix_domain_socket"
     40 admin_base_path = "/v1"
     41 admin_contract_version = 1
     42 status_surface = "local_admin_service_status_v1"
     43 operations_surface = "cached_livez_readyz_metrics"
     44 support_posture = "target"
     45 tier_1_targets = ["x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu"]
     46 
     47 [service_artifacts.myc]
     48 service_id = "myc"
     49 service_revision = "77b381648ed1e586efb696888beb05b9215c69cf"
     50 release_contract = "contracts/services_hardening/native_release.v2.json"
     51 release_contract_sha256 = "4b3ba5789fac6aa219e84e1e5c002cf8230b72f95fd6d95a6419d2fdf2915f83"
     52 source_lock_sha256 = "f5ebb390a480830d51d502facc623bd1b10eda27b12dad9f3dbb6a1f1f949217"
     53 package_name = "myc"
     54 binary_name = "myc"
     55 version = "0.1.0"
     56 channel = "stable"
     57 binary_archive_name = "binary.tar.gz"
     58 artifact_manifest_name = "artifact-manifest.v1.json"
     59 checksums_name = "SHA256SUMS"
     60 output_inventory = ["LICENSE", "SHA256SUMS", "THIRD-PARTY-NOTICES.txt", "artifact-manifest.v1.json", "binary.tar.gz", "config.example.toml", "config.schema.json", "provenance-input.v1.json", "radroots.service.source-lock.v2.toml", "sbom.cdx.json", "service-source.tar.gz", "systemd.service"]
     61 tier_1_targets = ["x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu"]
     62 
     63 [service_artifacts.rhi]
     64 service_id = "rhi"
     65 service_revision = "07aa6ea988da5372654bb3d1ee183ac099a77cae"
     66 release_contract = "contracts/services_hardening/native_release.v1.json"
     67 release_contract_sha256 = "06a973176b4b8c11dad13000604576527df829dd0bbe2f501158662f75e70b94"
     68 source_lock_sha256 = "3cc8bfac0d98730937754abae2ccfe20e40d0a9bbdefe02ebd94264c20f0d0ff"
     69 package_name = "rhi"
     70 binary_name = "rhi"
     71 version = "0.1.0"
     72 channel = "stable"
     73 binary_archive_name = "binary.tar.gz"
     74 artifact_manifest_name = "artifact-manifest.v1.json"
     75 checksums_name = "SHA256SUMS"
     76 output_inventory = ["LICENSE", "SHA256SUMS", "THIRD-PARTY-NOTICES.txt", "artifact-manifest.v1.json", "binary.tar.gz", "config.example.toml", "config.schema.json", "provenance-input.v1.json", "radroots.service.source-lock.v2.toml", "sbom.cdx.json", "service-source.tar.gz", "systemd.service"]
     77 tier_1_targets = ["x86_64-unknown-linux-gnu", "aarch64-unknown-linux-gnu"]