docs: lead quickstart with release image, add standalone auditor path - #24
Merged
Conversation
- docker run ghcr.io/clawdlinux/agentgate:0.1.1 is now the primary path
(verified: the published tag is 0.1.1, not v0.1.1 -- GoReleaser's
{{ .Version }} template strips the v).
- docker compose is now the development option, below it.
- Added a standalone auditing section: download agentgate-verify from
the releases page and run it against a local sqlite file + pinned
trust.json, no Docker/Go toolchain/network needed at verify time.
- Fixed a pre-existing bug in the old quickstart: both the release and
compose images are FROM scratch (no shell), so the documented
'docker compose exec agentgate sh -c ...' verify step never actually
worked post the pure-Go sqlite migration. Replaced with the same
standalone flow, pointed at compose's bind-mounted data dir.
Every command in this diff was run end-to-end against the real
ghcr.io/clawdlinux/agentgate:0.1.1 image and a fresh clone of main.
Signed-off-by: Shreyansh Sancheti <43677304+shreyanshjain7174@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rewrites the Quickstart so the release image (
docker run ghcr.io/clawdlinux/agentgate:0.1.1) is the primary path, withdocker composedemoted to "Development option." Adds a standalone auditor section: downloadagentgate-verifyfrom the releases page and verify a receipt chain with no Docker, no Go toolchain, no network at verify time.Also fixes a real bug found while verifying this: both the release and compose images are
FROM scratch(no shell), so the olddocker compose exec agentgate sh -c '...'verify step hasn't actually worked since the pure-Go SQLite migration (#20). Replaced with the same standalone flow against the bind-mounted data dir.One correction worth flagging: the actual published tag is
0.1.1, notv0.1.1— GoReleaser's{{ .Version }}template strips thevprefix. Confirmed by pulling both from ghcr.io directly.Every command in this diff was run end-to-end:
docker runagainst the realghcr.io/clawdlinux/agentgate:0.1.1, the/v1/actcall, downloadingagentgate_0.1.1_darwin_arm64.tar.gzfrom the v0.1.1 release and runningagentgate-verifyagainst it, and a freshgit clone+docker compose up -d --build+make build-verifyfor the development path.