mirror of https://github.com/hauler-dev/hauler.git synced 2026-05-16 14:17:26 +00:00

Go to file

Zack Brady c0294c733b update release/2.0 from main (#546 )

* fix: handling of file referenced dependencies without repository field (#514)

co-authored-by: devleitner <devleitner@protonmail.com>

* bump go.opentelemetry.io/otel/sdk (#520)

bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go).

updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0)

---

updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.40.0
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* dev.md file (#521)

* smaller changes and updates for v1.4.2 release (#524)

* smaller changes and updates for v1.4.2 release
* removed unused env variable

* over-"haul": replace oras v1 and cosign fork with native containerd-based implementation (#515)

* remove oras from hauler

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* remove cosign fork and use upstream cosign for verification

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* added support for oci referrers

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* updated README.md projects list

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* updates for copilot PR review

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for unsafe type assertions

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for http getter and dead code

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* fixes for more clarity and better error handling

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for resource leaks and unchecked errors

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for rewrite logic for docker.io images due to cosign removal

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for sigs and referrers

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix for index.json missing mediatype

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bug fix to make sure manifest.json doesnt include anything other than actual container images

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bump github.com/docker/cli in the go_modules group across 1 directory (#526)

bumps the go_modules group with 1 update in the / directory: [github.com/docker/cli](https://github.com/docker/cli).


updates `github.com/docker/cli` from 29.0.3+incompatible to 29.2.0+incompatible
- [Commits](https://github.com/docker/cli/compare/v29.0.3...v29.2.0)

---

updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.2.0+incompatible
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* removed deprecated code (#528)

* removed deprecated code
* removed all supported for v1alpha1

* fix extract for oci files (#529)

* fix extract for oci files

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* have extract guard against path traversal

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* improved test coverage (#530)

* improved test coverage

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* adjusted mapper_test for oddball oci files

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* adjust extract to handle an image index appropriately (#531)

* adjust extract to handle images and image indices appropriately

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* updates for review feedback

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* fix dockerhub default host bug (#534)

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* adjust hauler's kind annotation to not reflect cosign (#535)

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* bump google.golang.org/grpc in the go_modules group across 1 directory (#536)

bumps the go_modules group with 1 update in the / directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go).

updates `google.golang.org/grpc` from 1.78.0 to 1.79.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3)

---

updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* add cherry-pick workflow for release branches (#533)

this workflow automates cherry-picking changes from merged pull requests to specified release branches based on comments... it handles permission checks, version parsing, and conflict resolution during the cherry-pick process.

Signed-off-by: Camryn Carter <camryn.carter@ranchergovernment.com>

* images.txt testdata file (#539)

* fix keep registry logic (#537)

* fixed keep registry logic
* trim library/
* updated test
* test updates

* option to sync images.txt files natively (#538)

* sync images.txt files
* test worklflow sync w image list
* images.txt

* chunk the haul (#519)

* chunk the haul
* validate numeric suffix on join
* enforce valid chunk size
* containerd warning
* updated test.go files

* bump github.com/go-jose/go-jose/v4 (#542)

bumps the go_modules group with 1 update in the / directory: [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose).


updates `github.com/go-jose/go-jose/v4` from 4.1.3 to 4.1.4

- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4)

---

updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
  dependency-group: go_modules

...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* allow multiple prefix references (#532)

* allow multiple prefix references
* fixed some duplications

* add optional flag for excluding extra artifacts when pulling from a registry (#541)

* add optional flag for excluding extra artifacts when pulling from a registry

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

* add optional flag to charts for excluding extra artifacts when pulling from a registry

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Adam Martin <adam.martin@ranchergovernment.com>
Signed-off-by: Camryn Carter <camryn.carter@ranchergovernment.com>
Co-authored-by: devLeitner <87783219+devLeitner@users.noreply.github.com>
Co-authored-by: devleitner <devleitner@protonmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Camryn Carter <camryn.carter@ranchergovernment.com>
Co-authored-by: Adam Martin <adam.martin@ranchergovernment.com>

2026-04-08 12:09:23 -04:00

.github

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

cmd/hauler

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

internal

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

pkg

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

static

github.com/rancherfederal/hauler => hauler.dev/go/hauler (#311 )

2024-08-26 13:54:06 -07:00

testdata

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

.gitignore

forked cosign bump to 2.4.1 and use as a library vs embedded binary (#383 )

2025-01-10 17:14:44 -05:00

.goreleaser.yaml

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

DEVELOPMENT.md

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

Dockerfile

upgraded versions/dependencies/deprecations (#454 )

2025-10-02 14:23:22 -04:00

go.mod

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

go.sum

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

install.sh

updated/fixed hauler directory (#354 )

2024-11-14 21:37:25 -05:00

LICENSE

add license file

2024-01-22 15:06:09 -05:00

Makefile

forked cosign bump to 2.4.1 and use as a library vs embedded binary (#383 )

2025-01-10 17:14:44 -05:00

README.md

update release/2.0 from main (#546 )

2026-04-08 12:09:23 -04:00

README.md

Rancher Government Hauler

Airgap Swiss Army Knife

Rancher Government Hauler simplifies the airgap experience without requiring operators to adopt a specific workflow. Hauler simplifies the airgapping process, by representing assets (images, charts, files, etc...) as content and collections to allow operators to easily fetch, store, package, and distribute these assets with declarative manifests or through the command line.

Hauler does this by storing contents and collections as OCI Artifacts and allows operators to serve contents and collections with an embedded registry and fileserver. Additionally, Hauler has the ability to store and inspect various non-image OCI Artifacts.

For more information, please review the Hauler Documentation!

Recent Changes

In Hauler v2.0.0...

Removed support for apiVersion of v1alpha and removed the automated conversion functionality to v1.
- Please note that notices have been provided in this README, the docs, and in cli warnings since Hauler v1.2.x.

In Hauler v1.4.0...

Added a notice to hauler store sync --products/--product-registry to warn users the default registry will be updated in a future release.
- Users will see logging notices when using the --products/--product-registry such as...
- !!! WARNING !!! [--products] will be updating its default registry in a future release...
- !!! WARNING !!! [--product-registry] will be updating its default registry in a future release...

From older releases...

Updated the behavior of hauler store load to default to loading a haul with the name of haul.tar.zst and requires the flag of --filename/-f to load a haul with a different name
Users can load multiple hauls by specifying multiple flags of --filename/-f
- updated command usage: hauler store load --filename hauling-hauls.tar.zst
- previous command usage (do not use): hauler store load hauling-hauls.tar.zst

Updated the behavior of hauler store sync to default to syncing a manifest with the name of hauler-manifest.yaml and requires the flag of --filename/-f to sync a manifest with a different name
Users can sync multiple manifests by specifying multiple flags of --filename/-f
- updated command usage: hauler store sync --filename hauling-hauls-manifest.yaml
- previous command usage (do not use): hauler store sync --files hauling-hauls-manifest.yaml

Please review the documentation for any additional Known Limits, Issues, and Notices!

Installation

Linux/Darwin

# installs latest release
curl -sfL https://get.hauler.dev | bash

Homebrew

# installs latest release
brew tap hauler-dev/homebrew-tap
brew install hauler

Windows

# coming soon

Acknowledgements

Hauler wouldn't be possible without the open-source community, but there are a few projects that stand out:

Languages

Go 97.7%

Shell 1.6%

Dockerfile 0.3%

Makefile 0.3%

HTML 0.1%