Files
shoes/scripts
cfal 1140fd94aa build(docker): package the release binary in a non-root image
Build the locked workspace with Rust 1.95 and ship only the binary, CA certificates, and complete license notices in a Debian runtime. Keep local credentials and unrelated files outside the build context.

Add a Linux container smoke test covering configuration, real proxy traffic, notice integrity, restricted runtime permissions, and graceful shutdown.
2026-10-24 00:13:59 +00:00
..