Skip to content

Supply Chain

4 pages
  • From Upstream Images to a Signed Catalog

    In Design 935 words 5 min

    DesignImagesSupply ChainReleases

    An image audit answers a narrower question than an image release. It can find a newer upstream file, but Barn may add that file to its signed catalog only after the artifact, runtime profile, and boot path have all been verified. The image reference …

    An image audit answers a narrower question than an image release. It can find a newer upstream file, but Barn may add that file to its signed catalog only after the artifact, runtime profile, and boot path have all been verified. The image reference …

  • Barn 0.5.0: explicit disposal, explicit repositories, reproducible images

    In Releases 511 words 3 min

    ReleaseQEMUImagesSupply Chain

    Note Historical release record (0.5.0). Official mirror failover was later added in 0.7.0, and the rm alias was removed in 0.9.0. Old release downloads are retired; see the CLI reference and installation guide for current usage. Barn 0.5.0 adds an …

    Note Historical release record (0.5.0). Official mirror failover was later added in 0.7.0, and the rm alias was removed in 0.9.0. Old release downloads are retired; see the CLI reference and installation guide for current usage. Barn 0.5.0 adds an …

  • Barn 0.2.0: selected convergence and release integrity

    In Releases 351 words 2 min

    ReleaseQEMUNetworkingSupply Chain

    Note Historical release record (0.2.0). Old release downloads are retired; use the installation guide for the current release. Barn 0.2.0 keeps the Pigsty inventory and on-disk deployment format introduced in 0.1.0 while fixing VPN route preflight …

    Note Historical release record (0.2.0). Old release downloads are retired; use the installation guide for the current release. Barn 0.2.0 keeps the Pigsty inventory and on-disk deployment format introduced in 0.1.0 while fixing VPN route preflight …

  • repo.yaml Is Intent; catalog.json Is Evidence

    In Design 833 words 4 min

    DesignImagesSupply ChainCatalog

    This essay explains the Linux image repository contract in Barn 1.1.0 (macOS guests manage Apple .ipsw restore images and APFS base images separately via barn mac). A static VM image repository needs two kinds of metadata: human policy decisions …

    This essay explains the Linux image repository contract in Barn 1.1.0 (macOS guests manage Apple .ipsw restore images and APFS base images separately via barn mac). A static VM image repository needs two kinds of metadata: human policy decisions …