stwaidele/dorfteich

M28 — VS-NfD: offline/airgap deployment

New Issue

A verified airgap path, not a plausible one: registry mirror procedure, network-free reproducible build, a documented isolated test run, and an offline update path including migrations. Depends on image digest pinning (#203) in M25 (hardening & supply chain).

No due date

100% Completed

Restore reports failure on partitioned tables: pg_restore --clean cannot drop inherited partition PKs

#288 by fable-5 was closed 2026-07-31 17:24:18 +02:00

[VS-NfD] Define the offline update path including migrations

area:supply-chain

#221 by fable-5 was closed 2026-07-31 17:46:31 +02:00 0 / 5

[VS-NfD] Run and document a deployment in a network-isolated environment

area:supply-chain

#220 by fable-5 was closed 2026-07-31 17:27:49 +02:00 0 / 5

[VS-NfD] Make the build reproducible without network access

area:supply-chain

#219 by fable-5 was closed 2026-07-31 15:01:48 +02:00 0 / 4

[VS-NfD] Document the mirror procedure into an internal registry

area:supply-chain

#218 by fable-5 was closed 2026-07-31 15:01:48 +02:00 0 / 5