stackrox/stackrox

Built roxctl from the pinned source and ran `roxctl helm output central-services` to render the StackRox Central Helm chart into a fresh directory, then read back Chart.yaml (name: stackrox-central-services).

cd <host-path> && ls -la && cat README.md 2>/dev/null | head -200; ls <host-path> 2>/dev/null; echo CDP=$CDP_URL $<env-var>
cd <host-path> && grep -n "^#" README.md | sed -n 1,80p; grep -n -i "roxctl\|go build\|make " README.md | head -60; cat <host-path> | head -80; go version 2>&1; make --version | head -1
cd <host-path> && sed -n 337,378p README.md; sed -n 446,480p README.md; grep -m1 "^go " go.mod; grep -n "^roxctl\|^cli:\|CLI_BINARY\|roxctl:" Makefile | head; ls roxctl | head -30; cat BUILD_IMAGE_VERSION; sed -n 80,200p <host-path> | grep -n "roxctl\|version\|help" | head
cd <host-path> && sed -n 423,442p Makefile; cat roxctl/README.md | head -60; (sudo apt-get update -qq && sudo DEBIAN_FRONTEND=noninteractive apt-get install -y -qq make curl git >/dev/null 2>&1; echo apt=$?); curl -sI https://go.dev/dl/go1.26.7.linux-amd64.tar.gz | head -3; curl -sI https://proxy.golang.org | head -1
cd /tmp && curl -fsSL -o go.tgz https://go.dev/dl/go1.26.7.linux-amd64.tar.gz && sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go.tgz && /usr/local/go/bin/go version
cd <host-path> && export PATH=/usr/local/go/bin:$PATH GOFLAGS=-mod=mod GOTOOLCHAIN=local && mkdir -p <host-path> && time (RACE=0 CGO_ENABLED=0 go build -o <host-path> ./roxctl > /tmp/build.log 2>&1; echo rc=$?) ; tail -20 /tmp/build.log
cd <host-path> && ls -l go.mod go.sum && <host-path> version; <host-path> helm --help | head -20; <host-path> helm output --help | head -30
cd <host-path> && <host-path> version; echo rc=$?; OUT=<host-path> +%s); <host-path> helm output central-services --output-dir $OUT --image-defaults opensource; echo rc=$?; ls $OUT; head -5 $OUT/Chart.yaml; echo $OUT > <host-path>
cd <host-path> && grep -n "GOBUILD\s*[:?]*=\|GOBUILD :=\|LDFLAGS\|ROX_VERSION\|^build-prep\|MAIN_VERSION\s*[:?]*=" Makefile make/*.mk | head -30; cat <host-path> | sed -n 140,160p; ls <host-path>
cd <host-path> && cat scripts/go-build.sh | head -60; sed -n 405,420p Makefile; grep -n "func GetMainVersion" -A8 pkg/version/version.go; cat pkg/version/internal/*.go 2>/dev/null | grep -n "ldflags\|var\|version" | head; grep -rn "MAIN_VERSION\|ROX_MAIN" Makefile make/*.mk scripts/*.sh 2>/dev/null | head -8
cd <host-path> && cat status.sh; grep -rn "XDef" pkg/version/internal/*.go | head -5; grep -n "^var\|^\t[A-Z].*=" pkg/version/internal/*.go | head
cd <host-path> && export PATH=/usr/local/go/bin:$PATH GOTOOLCHAIN=local && RACE=0 CGO_ENABLED=0 go build -ldflags "-s -w -X github.com/stackrox/rox/pkg/version/internal.MainVersion=4.10.0 -X github.com/stackrox/rox/pkg/version/internal.CollectorVersion=4.10.0 -X github.com/stackrox/rox/pkg/version/internal.FactVersion=4.10.0 -X github.com/stackrox/rox/pkg/version/internal.GitShortSha=e831e09" -o <host-path> ./roxctl 2>&1 | tail -5; <host-path> version 2>&1 | tail -3; OUT=<host-path> +%s); <host-path> helm output central-services --output-dir $OUT --image-defaults opensource 2>&1 | tail -5; echo rc=$?; ls $OUT && head -5 $OUT/Chart.yaml; echo $OUT > <host-path>; ls -l go.mod go.sum
cd <host-path> && rm -rf <host-path> <host-path> && mkdir -p <host-path> && cat > <host-path> <<'EOF'
{"kind":"cli","argv":["<host-path>","stdin":"","env":{}}
EOF
cat > <host-path> <<'EOF'
{"outcome":"working",
"operation":"Built roxctl from the pinned source and ran `roxctl helm output central-services` to render the StackRox Central Helm chart into a fresh directory, then read back Chart.yaml (name: stackrox-central-services).",
"operation_scope":"Offline chart rendering only. Does not exercise a running Central, image scanning, or cluster deployment, which need a Kubernetes cluster and Central credentials. No browser needed.",
"steps":["Read README.md (Build Tooling, Common Makefile Targets, Helm install sections)","Installed make, curl, git via apt-get (make was missing)","Installed Go 1.26.7 (go.mod go directive) from go.dev tarball to /usr/local/go","go build -o <host-path> ./roxctl (CGO_ENABLED=0, RACE=0), with version ldflags (see deviations)","roxctl version -> 4.10.0","roxctl helm output central-services --output-dir <host-path> --image-defaults opensource -> Written Helm chart; Chart.yaml read back"],
"deviations":["README has no runnable roxctl build command; `make roxctl`/`make main-build-dockerized` need make + docker and the README points to make targets, so I built roxctl directly with go build instead.","`make` not installed in guest: installed via apt-get install make.","Go not installed: downloaded go1.26.7 tarball (go.mod requires 1.26.7).","`go build ./roxctl` alone printed `panic: failed to parse main version \"\"` on helm output. Cause: version is injected via scripts/go-build.sh + status.sh (needs a .git dir and make tag). Fixed by passing -ldflags -X for pkg/version/internal.{MainVersion,CollectorVersion,FactVersion,GitShortSha} with placeholder 4.10.0 / e831e09. Source unchanged.","`roxctl helm output` is deprecated in this build (warning printed); it is the only offline roxctl operation I could run without a cluster. It is not shown in the README itself.","Did not run make test/style or unit suites, per instructions. Go module download and the build modified nothing in go.mod/go.sum."],
"stuck_step":null,"main_blocker":null,"suggested_fix":null}
EOF
<env-var>=<host-path> python3 -I <host-path> --validate; echo rc=$?