best-peer 0.0.30

best-peer 0.0.30

A resolve and a pull can carry a registry token, sent to the image's own registry alone and never shown, so a node can pull an image a platform's registry keeps private.

Commits since v0.0.29

• Review: a runtime that keeps the trait's defaults is tested to refuse a credential, since only runtimes that carry one were (89178fa)
• Review: the Docker adapter's credentials are tested as the engine receives them, since only a host run proved them (a7e2cb1)
• Review: the registry test names a neutral host, since a client's platform is named nowhere in best-peer (c171aba)
• Review: a first part with an uppercase letter names a registry, as Docker reads it, so a Docker Hub token never goes to it (da63399)
• Review: a registry token's registry is read as a bare host and port, so a name with @ or another sign never reaches Docker Hub (9ec29b6)
• Review: a registry token names its registry by a host, a pull refused before the registry is asked is not counted as pulled, and the README tells the credential (62e8766)
• Resolve and pull with a registry token for the image's own registry, so a node can pull an order's image from a registry that grants that one pull (8ec27e7)

Run it

One binary. Download the archive for the machine, check it against SHA256SUMS, unpack it and run best-peer with the environment the README's Run section names; best-peer --version says best-peer 0.0.30. Each archive is here twice, byte for byte the same: under the name with the version, for pinning, and under the name without it, which releases/latest/download/<name> resolves to the newest release, as the README's commands use.

Machine	Archive	Same file, unversioned
Linux x86_64 (glibc 2.35 or newer)	best-peer-0.0.30-x86_64-unknown-linux-gnu.tar.gz	best-peer-x86_64-unknown-linux-gnu.tar.gz
Windows x86_64	best-peer-0.0.30-x86_64-pc-windows-msvc.zip	best-peer-x86_64-pc-windows-msvc.zip
macOS Apple silicon	best-peer-0.0.30-aarch64-apple-darwin.tar.gz	best-peer-aarch64-apple-darwin.tar.gz

Every archive carries a build provenance attestation: gh attestation verify <archive> --repo behavioralstate/best-peer.