Run update.sh

clearlinux/README.md

@@ -14,6 +14,12 @@ WARNING:
 
 -->
 
+# **DEPRECATION NOTICE**
+
+https://community.clearlinux.org/t/all-good-things-come-to-an-end-shutting-down-clear-linux-os/10716
+
+> Effective immediately [2025-07-18], Intel will no longer provide security patches, updates, or maintenance for Clear Linux OS, and the Clear Linux OS GitHub repository will be archived in read-only mode. So, if you’re currently using Clear Linux OS, we strongly recommend planning your migration to another actively maintained Linux distribution as soon as possible to ensure ongoing security and stability.
+
 # Quick reference
 
 -	**Maintained by**:  

debian/README.md

@@ -24,53 +24,53 @@ WARNING:
 
 # Supported tags and respective `Dockerfile` links
 
--	[`bookworm`, `bookworm-20250630`, `12.11`, `12`, `latest`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bookworm/oci/index.json)
+-	[`bookworm`, `bookworm-20250721`, `12.11`, `12`, `latest`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bookworm/oci/index.json)
 
--	[`bookworm-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bookworm/backports/Dockerfile)
+-	[`bookworm-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bookworm/backports/Dockerfile)
 
--	[`bookworm-slim`, `bookworm-20250630-slim`, `12.11-slim`, `12-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bookworm/slim/oci/index.json)
+-	[`bookworm-slim`, `bookworm-20250721-slim`, `12.11-slim`, `12-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bookworm/slim/oci/index.json)
 
--	[`bullseye`, `bullseye-20250630`, `11.11`, `11`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bullseye/oci/index.json)
+-	[`bullseye`, `bullseye-20250721`, `11.11`, `11`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bullseye/oci/index.json)
 
--	[`bullseye-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bullseye/backports/Dockerfile)
+-	[`bullseye-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bullseye/backports/Dockerfile)
 
--	[`bullseye-slim`, `bullseye-20250630-slim`, `11.11-slim`, `11-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/bullseye/slim/oci/index.json)
+-	[`bullseye-slim`, `bullseye-20250721-slim`, `11.11-slim`, `11-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/bullseye/slim/oci/index.json)
 
--	[`experimental`, `experimental-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/experimental/Dockerfile)
+-	[`experimental`, `experimental-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/experimental/Dockerfile)
 
--	[`oldstable`, `oldstable-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/oldstable/oci/index.json)
+-	[`oldstable`, `oldstable-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/oldstable/oci/index.json)
 
--	[`oldstable-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/oldstable/backports/Dockerfile)
+-	[`oldstable-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/oldstable/backports/Dockerfile)
 
--	[`oldstable-slim`, `oldstable-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/oldstable/slim/oci/index.json)
+-	[`oldstable-slim`, `oldstable-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/oldstable/slim/oci/index.json)
 
--	[`rc-buggy`, `rc-buggy-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/rc-buggy/Dockerfile)
+-	[`rc-buggy`, `rc-buggy-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/rc-buggy/Dockerfile)
 
--	[`sid`, `sid-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/sid/oci/index.json)
+-	[`sid`, `sid-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/sid/oci/index.json)
 
--	[`sid-slim`, `sid-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/sid/slim/oci/index.json)
+-	[`sid-slim`, `sid-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/sid/slim/oci/index.json)
 
--	[`stable`, `stable-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/stable/oci/index.json)
+-	[`stable`, `stable-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/stable/oci/index.json)
 
--	[`stable-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/stable/backports/Dockerfile)
+-	[`stable-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/stable/backports/Dockerfile)
 
--	[`stable-slim`, `stable-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/stable/slim/oci/index.json)
+-	[`stable-slim`, `stable-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/stable/slim/oci/index.json)
 
--	[`testing`, `testing-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/testing/oci/index.json)
+-	[`testing`, `testing-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/testing/oci/index.json)
 
--	[`testing-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/testing/backports/Dockerfile)
+-	[`testing-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/testing/backports/Dockerfile)
 
--	[`testing-slim`, `testing-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/testing/slim/oci/index.json)
+-	[`testing-slim`, `testing-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/testing/slim/oci/index.json)
 
--	[`trixie`, `trixie-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/trixie/oci/index.json)
+-	[`trixie`, `trixie-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/trixie/oci/index.json)
 
--	[`trixie-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/trixie/backports/Dockerfile)
+-	[`trixie-backports`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/trixie/backports/Dockerfile)
 
--	[`trixie-slim`, `trixie-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/trixie/slim/oci/index.json)
+-	[`trixie-slim`, `trixie-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/trixie/slim/oci/index.json)
 
--	[`unstable`, `unstable-20250630`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/unstable/oci/index.json)
+-	[`unstable`, `unstable-20250721`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/unstable/oci/index.json)
 
--	[`unstable-slim`, `unstable-20250630-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/832a6bc019b418928e987d454b5387f6907b64f2/unstable/slim/oci/index.json)
+-	[`unstable-slim`, `unstable-20250721-slim`](https://github.com/debuerreotype/docker-debian-artifacts/blob/c6274d8b402b7e394a69b9e0496df4c0df5efffe/unstable/slim/oci/index.json)
 
 # Quick reference (cont.)
 

docker/README.md

@@ -28,22 +28,22 @@ WARNING:
 
 ## Simple Tags
 
--	[`28.3.2-cli`, `28.3-cli`, `28-cli`, `cli`, `28.3.2-cli-alpine3.22`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/cli/Dockerfile)
+-	[`28.3.2-cli`, `28.3-cli`, `28-cli`, `cli`, `28.3.2-cli-alpine3.22`](https://github.com/docker-library/docker/blob/57bc3ac83209527653ba4abe6912df5d7c071daa/28/cli/Dockerfile)
 
 -	[`28.3.2-dind`, `28.3-dind`, `28-dind`, `dind`, `28.3.2-dind-alpine3.22`, `28.3.2`, `28.3`, `28`, `latest`, `28.3.2-alpine3.22`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/dind/Dockerfile)
 
 -	[`28.3.2-dind-rootless`, `28.3-dind-rootless`, `28-dind-rootless`, `dind-rootless`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/dind-rootless/Dockerfile)
 
--	[`28.3.2-windowsservercore-ltsc2025`, `28.3-windowsservercore-ltsc2025`, `28-windowsservercore-ltsc2025`, `windowsservercore-ltsc2025`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/windows/windowsservercore-ltsc2025/Dockerfile)
+-	[`28.3.2-windowsservercore-ltsc2025`, `28.3-windowsservercore-ltsc2025`, `28-windowsservercore-ltsc2025`, `windowsservercore-ltsc2025`](https://github.com/docker-library/docker/blob/57bc3ac83209527653ba4abe6912df5d7c071daa/28/windows/windowsservercore-ltsc2025/Dockerfile)
 
--	[`28.3.2-windowsservercore-ltsc2022`, `28.3-windowsservercore-ltsc2022`, `28-windowsservercore-ltsc2022`, `windowsservercore-ltsc2022`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/windows/windowsservercore-ltsc2022/Dockerfile)
+-	[`28.3.2-windowsservercore-ltsc2022`, `28.3-windowsservercore-ltsc2022`, `28-windowsservercore-ltsc2022`, `windowsservercore-ltsc2022`](https://github.com/docker-library/docker/blob/57bc3ac83209527653ba4abe6912df5d7c071daa/28/windows/windowsservercore-ltsc2022/Dockerfile)
 
 ## Shared Tags
 
 -	`28.3.2-windowsservercore`, `28.3-windowsservercore`, `28-windowsservercore`, `windowsservercore`:
 
-	-	[`28.3.2-windowsservercore-ltsc2025`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/windows/windowsservercore-ltsc2025/Dockerfile)
-	-	[`28.3.2-windowsservercore-ltsc2022`](https://github.com/docker-library/docker/blob/970a23424906f35f372532787bd20259e5090888/28/windows/windowsservercore-ltsc2022/Dockerfile)
+	-	[`28.3.2-windowsservercore-ltsc2025`](https://github.com/docker-library/docker/blob/57bc3ac83209527653ba4abe6912df5d7c071daa/28/windows/windowsservercore-ltsc2025/Dockerfile)
+	-	[`28.3.2-windowsservercore-ltsc2022`](https://github.com/docker-library/docker/blob/57bc3ac83209527653ba4abe6912df5d7c071daa/28/windows/windowsservercore-ltsc2022/Dockerfile)
 
 # Quick reference (cont.)
 

ghost/README.md

@@ -24,9 +24,9 @@ WARNING:
 
 # Supported tags and respective `Dockerfile` links
 
--	[`6.0.0-alpha.1`](https://github.com/docker-library/ghost/blob/83ce6d8beb81974a32d4b1461406ab4a3e8be365/6-rc/debian/Dockerfile)
+-	[`6.0.0-alpha.2`](https://github.com/docker-library/ghost/blob/e7b1033377c47e638d3875dc63468e814a655d08/6-rc/debian/Dockerfile)
 
--	[`6.0.0-alpha.1-alpine`](https://github.com/docker-library/ghost/blob/83ce6d8beb81974a32d4b1461406ab4a3e8be365/6-rc/alpine/Dockerfile)
+-	[`6.0.0-alpha.2-alpine`](https://github.com/docker-library/ghost/blob/e7b1033377c47e638d3875dc63468e814a655d08/6-rc/alpine/Dockerfile)
 
 -	[`5.130.2`, `5.130`, `5`, `latest`](https://github.com/docker-library/ghost/blob/9646b20a5604936a2ee5b703cfe4f2f8a30135a7/5/debian/Dockerfile)
 

satosa/README.md

@@ -14,10 +14,6 @@ WARNING:
 
 -->
 
-# **DEPRECATION NOTICE**
-
-This image is deprecated due to maintainer inactivity (last updated Dec 2023; [docker-library/official-images#15964](https://github.com/docker-library/official-images/pull/15964)).
-
 # Quick reference
 
 -	**Maintained by**:  
@@ -67,9 +63,7 @@ SATOSA is a configurable proxy for translating between different authentication
 
 ![logo](https://raw.githubusercontent.com/docker-library/docs/8e1f8cd99d5ce31197d5452d6d04886f791ac9c7/satosa/logo.svg?sanitize=true)
 
-# How to use this image
-
-## To start a SATOSA instance
+## Using This Image
 
 The basic pattern for starting a `satosa` instance is:
 
@@ -85,8 +79,6 @@ docker run --name some-satosa -p 80:8080 -d satosa
 
 The entrypoint script outputs SAML2 metadata to the container log at start time. This metadata refers to the instance's base URL, e.g., `https://example.com`. Browsers must be able to access the instance over HTTPS.
 
-# How to extend this image
-
 ## Configuration files
 
 The `satosa` image stores its configuration in /etc/satosa. This configuration must persist among instances, particularly the SAML2 entity ID (derived from the proxy's base URL by default) and related keying material. [Use volumes, bind mounts, or custom images](https://docs.docker.com/storage/) to maintain this configuration.
@@ -111,13 +103,13 @@ docker run -it --name some-satosa satosa bash
 
 ## Environment variables
 
-The entrypoint script uses environment variables to generate the initial configuration, which sets SATOSA up as a SAML2 proxy between the free [SAMLtest.ID](https://samltest.id/) test service provider and test identity provider. All of the environment variables are optional.
+The entrypoint script uses environment variables to generate the initial configuration, which requires customization. All of the environment variables are **OPTIONAL**.
 
-The environment variables' values can be read from [Docker secrets](https://docs.docker.com/engine/swarm/secrets/). Append `_FILE` to the variable name (e.g., `STATE_ENCRYPTION_KEY_FILE`), and set it to the pathname of the corresponding secret (e.g., `/run/secrets/state_encryption_key`).
+Environment variables' values can be read from [Docker secrets](https://docs.docker.com/engine/swarm/secrets/). Append `_FILE` to the variable name (e.g., `STATE_ENCRYPTION_KEY_FILE`), and set it to the pathname of the corresponding secret (e.g., `/run/secrets/state_encryption_key`).
 
 ### `BASE_URL`
 
-SATOSA must be hosted at the root of the website. This environment variable optionally specifies the website's base URL, which defaults to `http://example.com`. If set, the base URL *must* be a method plus a hostname without any trailing slash or path components, e.g., `https://idproxy.example.com`, not `https://idproxy.example.com/` nor `https://idproxy.example.com/satosa`.
+SATOSA **MUST** be hosted at the root of the website. This environment variable specifies the website's base URL, which defaults to `http://example.com`. If set, the base URL *must* be a method plus a hostname without any trailing slash or path components, e.g., `https://idproxy.example.com`, not `https://idproxy.example.com/` nor `https://idproxy.example.com/satosa`.
 
 ### `STATE_ENCRYPTION_KEY`
 
@@ -125,15 +117,15 @@ SATOSA uses encrypted cookies to track the progress of an authentication flow. T
 
 ### `SAML2_BACKEND_DISCO_SRV`
 
-When part of a SAML2 multilateral federation, SATOSA will ask the user to choose an identity provider using a SAML discovery service. This environment variable optionally sets the discovery service URL, which defaults to [SeamlessAccess](https://seamlessaccess.org/).
+When part of a SAML trust federation, SATOSA will ask the user to choose an identity provider using a SAML discovery service. This environment variable sets the discovery service URL, which defaults to [SeamlessAccess](https://seamlessaccess.org/).
 
 ### `SAML2_BACKEND_CERT` and `SAML2_BACKEND_KEY`
 
-SATOSA's SAML2 backend acts like a service provider (relying party), requesting authentication by and attributes from the user's identity provider. It uses public key cryptography to sign authentication requests and decrypt responses. These optional environment variables hold the backend's paired public and private keys in [the PEM format](https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail). If not specified, a new 2048-bit RSA key-pair will be generated using the hostname part of `BASE_URL`.
+SATOSA's default SAML back-end microservice acts like a service provider (relying party), requesting authentication by and attributes from the user-selected identity provider. The microservice uses public key cryptography to sign authentication requests and decrypt responses. These environment variables provide the requisite keying material in [the PEM format](https://en.wikipedia.org/wiki/Privacy-Enhanced_Mail). If not specified, a new 2048-bit RSA key-pair will be generated using the hostname part of `BASE_URL`.
 
 ### `SAML2_FRONTEND_CERT` and `SAML2_FRONTEND_KEY`
 
-SATOSA's SAML2 frontend acts like an identity provider (credential service provider), processing authentication requests from and returning user attributes to trusted websites. It uses public key cryptography to sign authentication responses. These optional environment variables hold the frontend's paired public and private keys, also in the PEM format. If not specified, a new 2048-bit RSA key-pair will be generated using the hostname part of `BASE_URL`.
+SATOSA's default SAML front-end microservice acts like an identity provider (credential service provider), processing authentication requests from and returning user attributes to trusted websites. It uses public key cryptography to sign authentication responses. These environment variables provide the requisite keying material, also in the PEM format. If not specified, a new 2048-bit RSA key-pair will be generated using the hostname part of `BASE_URL`.
 
 # Image Variants