Generated by licensegen. Do not edit by hand. Regenerate with make sbom.
This file describes the source tree: which components this commit links and embeds, at which versions, under which licenses. It is not the SBOM of a built binary. GitHub Releases ship one CycloneDX file and one SPDX file beside each edgelet-<os>-<arch> binary. Those files add the binary hash and, on Linux, the staged embed file hashes.
sbom.cdx.json and sbom.spdx.json list required and optional components that have a version. They omit excluded modules, which are not compiled into a shipped binary. They also omit contained programs that have no upstream version of their own (BusyBox, iproute2, iptables, nftables, ebtables, and util-linux). Those programs stay in the inventory below and in LICENSE-3RD-PARTY.md. They are shipped inside the pinned k3s-root tarball.
Container image attestations are not in this document.
| Scope | Meaning |
|---|---|
| required | Linked into a shipped binary, or staged into the Linux embed bundle |
| optional | Compiled into tests only |
| excluded | Present in go list -m all and compiled into nothing here |
Required 169, optional 0, excluded 223.
| Component | Version | License | Where |
|---|---|---|---|
| busybox | — | GPL-2.0-only | linux |
| ebtables | — | GPL-2.0-only | linux |
| Go | 1.26.10 | BSD-3-Clause | — |
| iproute2 | — | GPL-2.0-only | linux |
| iptables | — | GPL-2.0-or-later | linux |
| k3s-root (amd64) | v0.15.0 | NOASSERTION | linux |
| k3s-root (arm) | v0.15.0 | NOASSERTION | linux |
| k3s-root (arm64) | v0.15.0 | NOASSERTION | linux |
| k3s-root (riscv64) | v0.15.0 | NOASSERTION | linux |
| nftables | — | GPL-2.0-only | linux |
| SQLite | 3.53.4 | LicenseRef-SQLite-PublicDomain | darwin, linux-fat, windows |
| util-linux | — | GPL-2.0-or-later | linux |
| crun | 1.28 | GPL-2.0-or-later | linux |
| cni-plugins | v1.9.1-k3s1 | Apache-2.0 | linux |
| dario.cat/mergo | v1.0.2 | BSD-3-Clause | linux-fat |
| github.com/Microsoft/go-winio | v0.6.3-0.20251027160822-ad3df93bed29 | MIT | windows |
| github.com/Microsoft/hcsshim | v0.15.0-rc.1 | MIT | linux-fat |
| github.com/ProtonMail/go-crypto | v1.4.1 | BSD-3-Clause | linux-fat |
| github.com/beorn7/perks | v1.0.1 | MIT | linux-fat |
| github.com/bmatcuk/doublestar/v4 | v4.10.3 | MIT | darwin, linux-fat, windows |
| github.com/briandowns/spinner | v1.23.2 | Apache-2.0 | darwin, linux-thin, windows |
| github.com/cespare/xxhash/v2 | v2.3.0 | MIT | darwin, linux-fat, windows |
| github.com/checkpoint-restore/checkpointctl | v1.5.0 | Apache-2.0 | linux-fat |
| github.com/checkpoint-restore/go-criu/v7 | v7.2.0 | Apache-2.0 | linux-fat |
| github.com/cilium/ebpf | v0.22.0 | MIT | linux-fat |
| github.com/cloudflare/circl | v1.6.3 | BSD-3-Clause | linux-fat |
| github.com/containerd/cgroups/v3 | v3.1.3 | Apache-2.0 | linux-fat |
| github.com/containerd/console | v1.0.5 | Apache-2.0 | linux-fat |
| github.com/containerd/containerd/api | v1.11.1 | Apache-2.0 | linux-fat |
| github.com/containerd/continuity | v0.5.0 | Apache-2.0 | linux-fat |
| github.com/containerd/errdefs/pkg | v0.3.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/containerd/errdefs | v1.0.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/containerd/fifo | v1.1.0 | Apache-2.0 | linux-fat |
| github.com/containerd/go-cni | v1.1.13 | Apache-2.0 | linux-fat |
| github.com/containerd/go-runc | v1.1.0 | Apache-2.0 | linux-fat |
| github.com/containerd/imgcrypt/v2 | v2.0.3 | Apache-2.0 | linux-fat |
| github.com/containerd/log | v0.1.0 | Apache-2.0 | linux-fat |
| github.com/containerd/nri | v0.12.0 | Apache-2.0 | linux-fat |
| github.com/containerd/otelttrpc | v0.1.0 | Apache-2.0 | linux-fat |
| github.com/containerd/platforms | v1.0.0-rc.4 | Apache-2.0 | linux-fat |
| github.com/containerd/plugin | v1.1.0 | Apache-2.0 | linux-fat |
| github.com/containerd/ttrpc | v1.2.8 | Apache-2.0 | linux-fat |
| github.com/containerd/typeurl/v2 | v2.3.0 | Apache-2.0 | linux-fat |
| github.com/containernetworking/cni | v1.3.0 | Apache-2.0 | linux-fat |
| github.com/containernetworking/plugins | v1.9.1 | Apache-2.0 | linux-fat |
| github.com/containers/ocicrypt | v1.3.2 | Apache-2.0 | linux-fat |
| github.com/coreos/go-systemd/v22 | v22.7.0 | Apache-2.0 | linux-fat |
| github.com/cpuguy83/go-md2man/v2 | v2.0.7 | MIT | darwin, linux-fat, linux-thin, windows |
| github.com/cyphar/filepath-securejoin | v0.6.0 | BSD-3-Clause AND MPL-2.0 | linux-fat |
| github.com/davecgh/go-spew | v1.1.2-0.20180830191138-d8f796af33cc | ISC | linux-fat |
| github.com/distribution/reference | v0.6.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/docker/go-connections | v0.8.2 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/docker/go-events | v0.0.0-20190806004212-e31b211e4f1c | Apache-2.0 | linux-fat |
| github.com/docker/go-metrics | v0.0.1 | Apache-2.0 | linux-fat |
| github.com/docker/go-units | v0.5.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/dustin/go-humanize | v1.0.1 | MIT | darwin, linux-fat, windows |
| github.com/ebitengine/purego | v0.11.1 | Apache-2.0 | darwin |
| github.com/emicklei/go-restful/v3 | v3.13.0 | MIT | linux-fat |
| github.com/fatih/color | v1.7.0 | MIT | darwin, linux-thin, windows |
| github.com/felixge/httpsnoop | v1.1.0 | MIT | darwin, linux-fat, windows |
| github.com/fsnotify/fsnotify | v1.10.1 | BSD-3-Clause | darwin, linux-fat, linux-thin, windows |
| github.com/fxamacker/cbor/v2 | v2.9.0 | MIT | linux-fat |
| github.com/go-jose/go-jose/v4 | v4.1.6 | Apache-2.0 | linux-fat |
| github.com/go-logr/logr | v1.4.3 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/go-logr/stdr | v1.2.2 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/go-ole/go-ole | v1.2.6 | MIT | windows |
| github.com/godbus/dbus/v5 | v5.1.0 | BSD-2-Clause | linux-fat |
| github.com/golang-jwt/jwt/v5 | v5.3.1 | MIT | darwin, linux-fat, windows |
| github.com/google/uuid | v1.6.0 | BSD-3-Clause | darwin, linux-fat, windows |
| github.com/gorilla/websocket | v1.5.4-0.20250319132907-e064f32e3674 | BSD-2-Clause | darwin, linux-fat, linux-thin, windows |
| github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus | v1.1.0 | Apache-2.0 | linux-fat |
| github.com/grpc-ecosystem/go-grpc-middleware/v2 | v2.1.0 | Apache-2.0 | linux-fat |
| github.com/inconshreveable/mousetrap | v1.1.0 | Apache-2.0 | windows |
| github.com/intel/goresctrl | v0.12.0 | Apache-2.0 | linux-fat |
| github.com/k3s-io/containerd/v2 | v2.3.2-k3s2 | Apache-2.0 | linux-fat |
| containerd-shim-runc-v2 | v2.3.2-k3s2 | Apache-2.0 | linux |
| github.com/k3s-io/kubernetes/staging/src/k8s.io/cri-api | v1.36.2-k3s2 | Apache-2.0 | linux-fat |
| github.com/klauspost/compress | v1.20.3 | Apache-2.0 OR BSD-3-Clause OR MIT | linux-fat, linux-thin |
| github.com/knqyf263/go-plugin | v0.9.0 | MIT | linux-fat |
| github.com/mattn/go-colorable | v0.1.2 | MIT | darwin, linux-thin, windows |
| github.com/mattn/go-isatty | v0.0.24 | MIT | darwin, linux-thin, windows |
| github.com/mdlayher/socket | v0.5.1 | MIT | linux-fat |
| github.com/mdlayher/vsock | v1.2.1 | MIT | linux-fat |
| github.com/miekg/dns | v1.1.73 | BSD-3-Clause | darwin, linux-fat, windows |
| github.com/miekg/pkcs11 | v1.1.2 | BSD-3-Clause | linux-fat |
| github.com/moby/docker-image-spec | v1.3.1 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/moby/locker | v1.0.1 | Apache-2.0 | linux-fat |
| github.com/moby/moby/api | v1.56.1 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/moby/moby/client | v0.6.2 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/moby/spdystream | v0.5.1 | Apache-2.0 | linux-fat |
| github.com/moby/sys/capability | v0.4.0 | BSD-2-Clause | linux-fat |
| github.com/moby/sys/mountinfo | v0.7.2 | Apache-2.0 | linux-fat |
| github.com/moby/sys/signal | v0.7.1 | Apache-2.0 | linux-fat |
| github.com/moby/sys/symlink | v0.3.0 | Apache-2.0 | linux-fat |
| github.com/moby/sys/user | v0.4.1 | Apache-2.0 | linux-fat |
| github.com/moby/sys/userns | v0.1.0 | Apache-2.0 | linux-fat |
| github.com/munnerz/goautoneg | v0.0.0-20191010083416-a7dc8b61c822 | BSD-3-Clause | linux-fat |
| github.com/ncruces/go-strftime | v1.0.0 | MIT | darwin, windows |
| github.com/nxadm/tail | v1.4.11 | MIT | linux-fat |
| github.com/opencontainers/go-digest | v1.0.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/opencontainers/image-spec | v1.1.1 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/opencontainers/runtime-spec | v1.3.0 | Apache-2.0 | darwin, linux-fat, windows |
| github.com/opencontainers/runtime-tools | v0.9.1-0.20251114084447-edf4cb3d2116 | Apache-2.0 | linux-fat |
| github.com/opencontainers/selinux | v1.13.1 | Apache-2.0 | linux-fat |
| github.com/pelletier/go-toml/v2 | v2.3.0 | MIT | linux-fat |
| github.com/pelletier/go-toml | v1.9.5 | Apache-2.0 OR MIT | darwin, linux-fat, windows |
| github.com/prometheus/client_golang | v1.23.2 | Apache-2.0 | linux-fat |
| github.com/prometheus/client_model | v0.6.2 | Apache-2.0 | linux-fat |
| github.com/prometheus/common | v0.67.5 | Apache-2.0 | linux-fat |
| github.com/prometheus/procfs | v0.19.2 | Apache-2.0 | linux-fat |
| github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | BSD-3-Clause | darwin, linux-fat, windows |
| github.com/russross/blackfriday/v2 | v2.1.0 | BSD-2-Clause | darwin, linux-fat, linux-thin, windows |
| github.com/shirou/gopsutil/v4 | v4.26.9 | BSD-3-Clause | darwin, linux-fat, windows |
| github.com/sirupsen/logrus | v1.10.2 | MIT | darwin, linux-fat, linux-thin, windows |
| github.com/smallstep/pkcs7 | v0.2.1 | MIT | linux-fat |
| github.com/spf13/cobra | v1.10.2 | Apache-2.0 | darwin, linux-thin, windows |
| github.com/spf13/pflag | v1.0.10 | BSD-3-Clause | darwin, linux-thin, windows |
| github.com/stefanberger/go-pkcs11uri | v0.0.0-20230803200340-78284954bff6 | Apache-2.0 | linux-fat |
| github.com/tchap/go-patricia/v2 | v2.3.3 | MIT | linux-fat |
| github.com/tetratelabs/wazero | v1.11.0 | Apache-2.0 | linux-fat |
| github.com/tklauser/go-sysconf | v0.4.0 | BSD-3-Clause | darwin, linux-fat |
| github.com/tklauser/numcpus | v0.12.0 | Apache-2.0 | linux-fat |
| github.com/urfave/cli/v2 | v2.27.7 | MIT | linux-fat |
| github.com/vishvananda/netlink | v1.3.1 | Apache-2.0 | linux-fat |
| github.com/vishvananda/netns | v0.0.5 | Apache-2.0 | linux-fat |
| github.com/vmihailenco/msgpack/v5 | v5.4.1 | BSD-2-Clause | darwin, linux-fat, windows |
| github.com/vmihailenco/tagparser/v2 | v2.0.0 | BSD-2-Clause | darwin, linux-fat, windows |
| github.com/x448/float16 | v0.8.4 | MIT | linux-fat |
| github.com/xrash/smetrics | v0.0.0-20240521201337-686a1a2994c1 | MIT | linux-fat |
| github.com/yusufpapurcu/wmi | v1.2.4 | MIT | windows |
| go.etcd.io/bbolt | v1.4.3 | MIT | linux-fat |
| go.opentelemetry.io/auto/sdk | v1.2.1 | Apache-2.0 | darwin, linux-fat, windows |
| go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc | v0.68.0 | Apache-2.0 OR BSD-3-Clause | linux-fat |
| go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp | v0.69.0 | Apache-2.0 OR BSD-3-Clause | darwin, linux-fat, windows |
| go.opentelemetry.io/otel/metric | v1.44.0 | Apache-2.0 OR BSD-3-Clause | darwin, linux-fat, windows |
| go.opentelemetry.io/otel/trace | v1.44.0 | Apache-2.0 OR BSD-3-Clause | darwin, linux-fat, windows |
| go.opentelemetry.io/otel | v1.44.0 | Apache-2.0 OR BSD-3-Clause | darwin, linux-fat, windows |
| go.yaml.in/yaml/v2 | v2.4.3 | Apache-2.0 | linux-fat |
| go.yaml.in/yaml/v3 | v3.0.5 | Apache-2.0 OR MIT | darwin, linux-fat, linux-thin, windows |
| golang.org/x/crypto | v0.58.0 | BSD-3-Clause | darwin, linux-fat, windows |
| golang.org/x/mod | v0.41.0 | BSD-3-Clause | linux-fat |
| golang.org/x/net | v0.62.0 | BSD-3-Clause | darwin, linux-fat, linux-thin, windows |
| golang.org/x/sync | v0.24.0 | BSD-3-Clause | darwin, linux-fat, windows |
| golang.org/x/sys | v0.49.0 | BSD-3-Clause | darwin, linux-fat, linux-thin, windows |
| golang.org/x/term | v0.47.0 | BSD-3-Clause | darwin, linux-fat, linux-thin, windows |
| golang.org/x/text | v0.43.0 | BSD-3-Clause | linux-fat |
| golang.org/x/time | v0.15.0 | BSD-3-Clause | linux-fat |
| google.golang.org/genproto/googleapis/rpc | v0.0.0-20260706201446-f0a921348800 | Apache-2.0 | linux-fat |
| google.golang.org/grpc | v1.83.2 | Apache-2.0 | linux-fat |
| google.golang.org/protobuf | v1.36.12-0.20260120151049-f2248ac996af | BSD-3-Clause | linux-fat |
| gopkg.in/inf.v0 | v0.9.1 | BSD-3-Clause | linux-fat |
| gopkg.in/tomb.v1 | v1.0.0-20141024135613-dd632973f1e7 | BSD-3-Clause | linux-fat |
| gopkg.in/yaml.v3 | v3.0.1 | Apache-2.0 OR MIT | darwin, linux-fat, linux-thin, windows |
| k8s.io/apimachinery | v0.36.2 | Apache-2.0 | linux-fat |
| k8s.io/client-go | v0.36.2 | Apache-2.0 | linux-fat |
| k8s.io/cri-streaming | v0.36.2 | Apache-2.0 | linux-fat |
| k8s.io/klog/v2 | v2.140.0 | Apache-2.0 | linux-fat |
| k8s.io/streaming | v0.36.2 | Apache-2.0 | linux-fat |
| k8s.io/utils | v0.0.0-20260319190234-28399d86e0b5 | Apache-2.0 | linux-fat |
| modernc.org/libc | v1.77.1 | BSD-3-Clause | darwin, linux-fat, windows |
| modernc.org/mathutil | v1.7.1 | BSD-3-Clause | darwin, linux-fat, windows |
| modernc.org/memory | v1.12.1 | BSD-3-Clause | darwin, linux-fat, windows |
| modernc.org/sqlite | v1.60.1 | LicenseRef-SQLite-PublicDomain | darwin, linux-fat, windows |
| oras.land/oras-go/v2 | v2.7.0 | Apache-2.0 | darwin, linux-fat, windows |
| sigs.k8s.io/json | v0.0.0-20250730193827-2d320260d730 | Apache-2.0 OR BSD-3-Clause | linux-fat |
| sigs.k8s.io/yaml | v1.6.0 | Apache-2.0 OR BSD-3-Clause OR MIT | linux-fat |
| tags.cncf.io/container-device-interface/specs-go | v1.1.0 | Apache-2.0 | linux-fat |
| tags.cncf.io/container-device-interface | v1.1.0 | Apache-2.0 | linux-fat |
| portainer/pause | sha256:df6d2fb5cff97c4070a12953a34a56422879f1e02b43400f1caf1cbd530458b1 | Apache-2.0 | linux |
| Component | Version | License | Where |
|---|---|---|---|
| buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go | v1.31.0-20230802163732-1c33ebd9ecfa.1 | Apache-2.0 | — |
| cel.dev/expr | v0.25.2 | Apache-2.0 | — |
| cloud.google.com/go/auth | v0.18.2 | Apache-2.0 | — |
| cloud.google.com/go/compute/metadata | v0.9.0 | Apache-2.0 | — |
| cloud.google.com/go/compute | v1.23.4 | Apache-2.0 | — |
| cloud.google.com/go | v0.26.0 | Apache-2.0 | — |
| cyphar.com/go-pathrs | v0.2.1 | MPL-2.0 | — |
| github.com/AdaLogics/go-fuzz-headers | v0.0.0-20240806141605-e8a1dd7889d6 | Apache-2.0 | — |
| github.com/AdamKorcz/go-118-fuzz-build | v0.0.0-20231105174938-2b5cbb29f3e2 | Apache-2.0 | — |
| github.com/Azure/go-ansiterm | v0.0.0-20261006220739-8c912ac31dd4 | MIT | — |
| github.com/BurntSushi/toml | v1.6.0 | MIT | — |
| github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp | v1.33.0 | Apache-2.0 | — |
| github.com/Masterminds/semver/v3 | v3.4.0 | MIT | — |
| github.com/Microsoft/cosesign1go | v1.4.0 | MIT | — |
| github.com/Microsoft/didx509go | v0.0.3 | MIT | — |
| github.com/OneOfOne/xxhash | v1.2.8 | Apache-2.0 | — |
| github.com/StackExchange/wmi | v0.0.0-20190523213315-cbe66965904d | MIT | — |
| github.com/agnivade/levenshtein | v1.2.0 | MIT | — |
| github.com/akavel/rsrc | v0.10.2 | MIT | — |
| github.com/alecthomas/kingpin/v2 | v2.4.0 | MIT | — |
| github.com/alecthomas/template | v0.0.0-20160405071501-a0175ee3bccc | BSD-3-Clause | — |
| github.com/alecthomas/units | v0.0.0-20240927000941-0f3dac36c52b | MIT | — |
| github.com/alexflint/go-filemutex | v1.3.0 | MIT | — |
| github.com/antlr/antlr4/runtime/Go/antlr/v4 | v4.0.0-20230512164433-5d1fd1a340c9 | BSD-3-Clause | — |
| github.com/armon/go-socks5 | v0.0.0-20160902184237-e75332964ef5 | MIT | — |
| github.com/blang/semver/v4 | v4.0.0 | MIT | — |
| github.com/brianvoe/gofakeit/v7 | v7.12.1 | MIT | — |
| github.com/bufbuild/protovalidate-go | v0.2.1 | Apache-2.0 | — |
| github.com/buger/jsonparser | v1.1.1 | MIT | — |
| github.com/bwesterb/go-ristretto | v1.2.3 | MIT | — |
| github.com/cenkalti/backoff/v4 | v4.3.0 | MIT | — |
| github.com/cenkalti/backoff/v5 | v5.0.3 | MIT | — |
| github.com/census-instrumentation/opencensus-proto | v0.2.1 | Apache-2.0 | — |
| github.com/checkpoint-restore/go-criu/v6 | v6.3.0 | Apache-2.0 | — |
| github.com/checkpoint-restore/go-criu/v8 | v8.1.0 | Apache-2.0 | — |
| github.com/client9/misspell | v0.3.4 | MIT | — |
| github.com/cncf/udpa/go | v0.0.0-20191209042840-269d4d468f6f | Apache-2.0 | — |
| github.com/cncf/xds/go | v0.0.0-20260202195803-dba9d589def2 | Apache-2.0 | — |
| github.com/containerd/btrfs/v2 | v2.0.0 | Apache-2.0 | — |
| github.com/containerd/fuse-overlayfs-snapshotter/v2 | v2.1.7 | Apache-2.0 | — |
| github.com/containerd/go-dmverity | v0.1.0 | Apache-2.0 | — |
| github.com/containerd/protobuild | v0.3.0 | Apache-2.0 | — |
| github.com/containerd/stargz-snapshotter/estargz | v0.18.2 | Apache-2.0 | — |
| github.com/containerd/stargz-snapshotter | v0.18.2 | Apache-2.0 OR BSD-3-Clause OR MIT | — |
| github.com/containerd/zfs/v2 | v2.0.0 | Apache-2.0 | — |
| github.com/containers/storage | v1.59.1 | Apache-2.0 | — |
| github.com/coreos/go-iptables | v0.8.0 | Apache-2.0 | — |
| github.com/creack/pty | v1.1.24 | MIT | — |
| github.com/decred/dcrd/dcrec/secp256k1/v4 | v4.2.0 | ISC | — |
| github.com/docker/cli | v29.2.0+incompatible | Apache-2.0 | — |
| github.com/docker/distribution | v2.8.3+incompatible | Apache-2.0 | — |
| github.com/docker/docker-credential-helpers | v0.9.3 | MIT | — |
| github.com/docker/docker | v27.3.1+incompatible | Apache-2.0 | — |
| github.com/envoyproxy/go-control-plane/envoy | v1.37.0 | Apache-2.0 | — |
| github.com/envoyproxy/go-control-plane/ratelimit | v0.1.0 | Apache-2.0 | — |
| github.com/envoyproxy/go-control-plane | v0.14.0 | Apache-2.0 | — |
| github.com/envoyproxy/protoc-gen-validate | v1.3.3 | Apache-2.0 | — |
| github.com/erofs/go-erofs | v0.3.0 | Apache-2.0 | — |
| github.com/go-ini/ini | v1.67.0 | Apache-2.0 | — |
| github.com/go-kit/kit | v0.8.0 | MIT | — |
| github.com/go-logfmt/logfmt | v0.4.0 | MIT | — |
| github.com/go-openapi/jsonpointer | v0.21.0 | Apache-2.0 | — |
| github.com/go-openapi/jsonreference | v0.20.2 | Apache-2.0 | — |
| github.com/go-openapi/swag | v0.23.0 | Apache-2.0 | — |
| github.com/go-quicktest/qt | v1.101.1-0.20240301121107-c6c8733fa1e6 | MIT | — |
| github.com/go-stack/stack | v1.8.0 | MIT | — |
| github.com/go-task/slim-sprig/v3 | v3.0.0 | MIT | — |
| github.com/gobwas/glob | v0.2.3 | MIT | — |
| github.com/goccy/go-json | v0.10.2 | MIT | — |
| github.com/gogo/protobuf | v1.3.2 | BSD-3-Clause | — |
| github.com/golang/glog | v1.2.5 | Apache-2.0 | — |
| github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | Apache-2.0 | — |
| github.com/golang/mock | v1.1.1 | Apache-2.0 | — |
| github.com/golang/protobuf | v1.5.4 | BSD-3-Clause | — |
| github.com/google/btree | v1.1.3 | Apache-2.0 | — |
| github.com/google/cel-go | v0.17.1 | Apache-2.0 OR BSD-3-Clause | — |
| github.com/google/certtostore | v1.0.6 | Apache-2.0 | — |
| github.com/google/deck | v0.0.0-20230104221208-105ad94aa8ae | Apache-2.0 | — |
| github.com/google/gnostic-models | v0.7.0 | Apache-2.0 | — |
| github.com/google/go-cmp | v0.7.0 | BSD-3-Clause | — |
| github.com/google/go-containerregistry | v0.20.6 | Apache-2.0 | — |
| github.com/google/gofuzz | v1.2.0 | Apache-2.0 | — |
| github.com/google/pprof | v0.0.0-20260802141513-ef3492d7dac3 | Apache-2.0 | — |
| github.com/google/s2a-go | v0.1.9 | Apache-2.0 | — |
| github.com/googleapis/enterprise-certificate-proxy | v0.3.11 | Apache-2.0 | — |
| github.com/googleapis/gax-go/v2 | v2.17.0 | BSD-3-Clause | — |
| github.com/gorilla/mux | v1.8.1 | BSD-3-Clause | — |
| github.com/grafana/regexp | v0.0.0-20240518133315-a468a5bfb3bc | BSD-3-Clause | — |
| github.com/grpc-ecosystem/grpc-gateway/v2 | v2.28.0 | BSD-3-Clause | — |
| github.com/hanwen/go-fuse/v2 | v2.9.0 | BSD-3-Clause | — |
| github.com/hashicorp/errwrap | v1.1.0 | MPL-2.0 | — |
| github.com/hashicorp/go-cleanhttp | v0.5.2 | MPL-2.0 | — |
| github.com/hashicorp/go-multierror | v1.1.1 | MPL-2.0 | — |
| github.com/hashicorp/go-retryablehttp | v0.7.8 | MPL-2.0 | — |
| github.com/hashicorp/golang-lru/v2 | v2.0.7 | MPL-2.0 | — |
| github.com/insomniacslk/dhcp | v0.0.0-20240829085014-a3a4c1f04475 | BSD-3-Clause | — |
| github.com/josephspurrier/goversioninfo | v1.5.0 | MIT | — |
| github.com/josharian/intern | v1.0.0 | MIT | — |
| github.com/josharian/native | v1.1.0 | MIT | — |
| github.com/jpillora/backoff | v1.0.0 | MIT | — |
| github.com/jsimonetti/rtnetlink/v2 | v2.0.1 | MIT | — |
| github.com/json-iterator/go | v1.1.12 | MIT | — |
| github.com/julienschmidt/httprouter | v1.3.0 | BSD-3-Clause | — |
| github.com/klauspost/pgzip | v1.2.6 | MIT | — |
| github.com/konsorten/go-windows-terminal-sequences | v1.0.1 | MIT | — |
| github.com/kr/logfmt | v0.0.0-20140226030751-b84e30acd515 | MIT | — |
| github.com/kr/pretty | v0.3.1 | MIT | — |
| github.com/kr/text | v0.2.0 | MIT | — |
| github.com/kylelemons/godebug | v1.1.0 | Apache-2.0 | — |
| github.com/lestrrat-go/backoff/v2 | v2.0.8 | MIT | — |
| github.com/lestrrat-go/blackmagic | v1.0.2 | MIT | — |
| github.com/lestrrat-go/httpcc | v1.0.1 | MIT | — |
| github.com/lestrrat-go/iter | v1.0.2 | MIT | — |
| github.com/lestrrat-go/jwx | v1.2.29 | MIT | — |
| github.com/lestrrat-go/option | v1.0.1 | MIT | — |
| github.com/linuxkit/virtsock | v0.0.0-20241009230534-cb6a20cc0422 | Apache-2.0 | — |
| github.com/lufia/plan9stats | v0.0.0-20211012122336-39d0f177ccd0 | BSD-3-Clause | — |
| github.com/mailru/easyjson | v0.7.7 | MIT | — |
| github.com/mattn/go-shellwords | v1.0.12 | MIT | — |
| github.com/matttproud/golang_protobuf_extensions | v1.0.1 | Apache-2.0 | — |
| github.com/mdlayher/netlink | v1.7.2 | MIT | — |
| github.com/mdlayher/packet | v1.1.2 | MIT | — |
| github.com/mistifyio/go-zfs/v3 | v3.0.1 | Apache-2.0 | — |
| github.com/mitchellh/go-homedir | v1.1.0 | MIT | — |
| github.com/mndrix/tap-go | v0.0.0-20171203230836-629fa407e90b | LicenseRef-88d9b4eb6057 | — |
| github.com/moby/sys/sequential | v0.6.0 | Apache-2.0 | — |
| github.com/moby/term | v0.5.2 | Apache-2.0 | — |
| github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | Apache-2.0 | — |
| github.com/modern-go/reflect2 | v1.0.3-0.20250322232337-35a7c28c31ee | Apache-2.0 | — |
| github.com/mrunalp/fileutils | v0.5.1 | Apache-2.0 | — |
| github.com/mwitkow/go-conntrack | v0.0.0-20190716064945-2f068394615f | Apache-2.0 | — |
| github.com/mxk/go-flowrate | v0.0.0-20140419014527-cca7078d478f | BSD-3-Clause | — |
| github.com/networkplumbing/go-nft | v0.4.0 | Apache-2.0 | — |
| github.com/onsi/ginkgo/v2 | v2.25.1 | MIT | — |
| github.com/onsi/gomega | v1.38.1 | MIT | — |
| github.com/open-policy-agent/opa | v0.70.0 | Apache-2.0 | — |
| github.com/opencontainers/cgroups | v0.0.4 | Apache-2.0 | — |
| github.com/opencontainers/runc | v1.3.3 | Apache-2.0 | — |
| github.com/pdtpartners/nix-snapshotter | v0.4.0 | MIT | — |
| github.com/peterbourgon/diskv | v2.0.1+incompatible | MIT | — |
| github.com/petermattis/goid | v0.0.0-20240813172612-4fcff4a6cae7 | Apache-2.0 | — |
| github.com/pierrec/lz4/v4 | v4.1.21 | BSD-3-Clause | — |
| github.com/pkg/errors | v0.9.1 | BSD-2-Clause | — |
| github.com/planetscale/vtprotobuf | v0.6.1-0.20240319094008-0393e58bdf10 | BSD-3-Clause | — |
| github.com/pmezard/go-difflib | v1.0.1-0.20181226105442-5d4384ee4fb2 | BSD-2-Clause | — |
| github.com/power-devops/perfstat | v0.0.0-20260805114148-88456608a4f6 | MIT | — |
| github.com/prometheus/otlptranslator | v0.0.2 | Apache-2.0 | — |
| github.com/rcrowley/go-metrics | v0.0.0-20200313005456-10cdbea86bc0 | BSD-2-Clause | — |
| github.com/rogpeppe/go-internal | v1.14.1 | BSD-3-Clause | — |
| github.com/russross/blackfriday | v1.6.0 | BSD-2-Clause | — |
| github.com/safchain/ethtool | v0.6.2 | Apache-2.0 | — |
| github.com/samber/lo | v1.52.0 | MIT | — |
| github.com/santhosh-tekuri/jsonschema/v5 | v5.3.1 | Apache-2.0 | — |
| github.com/sasha-s/go-deadlock | v0.3.5 | Apache-2.0 | — |
| github.com/seccomp/libseccomp-golang | v0.10.0 | BSD-2-Clause | — |
| github.com/spiffe/go-spiffe/v2 | v2.7.0 | Apache-2.0 | — |
| github.com/stoewer/go-strcase | v1.3.0 | MIT | — |
| github.com/stretchr/objx | v0.5.2 | MIT | — |
| github.com/stretchr/testify | v1.12.1 | MIT | — |
| github.com/u-root/uio | v0.0.0-20240224005618-d2acac8f3701 | BSD-3-Clause | — |
| github.com/ulikunitz/xz | v0.5.15 | BSD-2-Clause | — |
| github.com/urfave/cli | v1.22.16 | MIT | — |
| github.com/vbatts/tar-split | v0.12.2 | BSD-3-Clause | — |
| github.com/veraison/go-cose | v1.1.0 | MPL-2.0 | — |
| github.com/xeipuuv/gojsonpointer | v0.0.0-20190905194746-02993c407bfb | Apache-2.0 | — |
| github.com/xeipuuv/gojsonreference | v0.0.0-20180127040603-bd5ef7bd5415 | Apache-2.0 | — |
| github.com/xeipuuv/gojsonschema | v1.2.0 | Apache-2.0 | — |
| github.com/xhit/go-str2duration/v2 | v2.1.0 | BSD-3-Clause | — |
| github.com/xlab/treeprint | v1.2.0 | MIT | — |
| github.com/yashtewari/glob-intersection | v0.2.0 | Apache-2.0 | — |
| github.com/yuin/goldmark | v1.4.13 | MIT | — |
| go.etcd.io/gofail | v0.2.0 | Apache-2.0 | — |
| go.opencensus.io | v0.24.0 | Apache-2.0 | — |
| go.opentelemetry.io/contrib/detectors/gcp | v1.44.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.42.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp | v1.42.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc | v1.43.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp | v1.43.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/otlp/otlptrace | v1.43.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/prometheus | v0.60.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/exporters/stdout/stdoutmetric | v1.42.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/sdk/metric | v1.44.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/otel/sdk | v1.44.0 | Apache-2.0 OR BSD-3-Clause | — |
| go.opentelemetry.io/proto/otlp | v1.10.0 | Apache-2.0 | — |
| go.uber.org/automaxprocs | v1.6.0 | MIT | — |
| go.uber.org/goleak | v1.3.0 | MIT | — |
| go.uber.org/mock | v0.6.0 | Apache-2.0 | — |
| golang.org/x/exp/typeparams | v0.0.0-20260209203927-2842357ff358 | BSD-3-Clause | — |
| golang.org/x/exp | v0.0.0-20241108190413-2d47ceb2692f | BSD-3-Clause | — |
| golang.org/x/lint | v0.0.0-20190313153728-d0100b6bd8b3 | BSD-3-Clause | — |
| golang.org/x/oauth2 | v0.36.0 | BSD-3-Clause | — |
| golang.org/x/telemetry | v0.0.0-20240228155512-f48c80bd79b2 | BSD-3-Clause | — |
| golang.org/x/tools | v0.51.0 | BSD-3-Clause | — |
| golang.org/x/xerrors | v0.0.0-20200804184101-5ec99f83aff1 | BSD-3-Clause | — |
| gonum.org/v1/gonum | v0.17.0 | BSD-3-Clause | — |
| google.golang.org/appengine | v1.6.8 | Apache-2.0 | — |
| google.golang.org/genproto/googleapis/api | v0.0.0-20260526163538-3dc84a4a5aaa | Apache-2.0 | — |
| google.golang.org/genproto | v0.0.0-20200526211855-cb27e3aa2013 | Apache-2.0 | — |
| google.golang.org/grpc/cmd/protoc-gen-go-grpc | v1.5.1 | Apache-2.0 | — |
| gopkg.in/alecthomas/kingpin.v2 | v2.2.6 | MIT | — |
| gopkg.in/check.v1 | v1.0.0-20201130134442-10cb98267c6c | BSD-2-Clause | — |
| gopkg.in/evanphx/json-patch.v4 | v4.13.0 | BSD-3-Clause | — |
| gopkg.in/yaml.v2 | v2.4.0 | Apache-2.0 | — |
| gotest.tools/v3 | v3.5.2 | Apache-2.0 | — |
| honnef.co/go/tools | v0.7.0 | BSD-3-Clause OR MIT | — |
| k8s.io/api | v0.36.2 | Apache-2.0 | — |
| k8s.io/component-base | v0.36.2 | Apache-2.0 | — |
| k8s.io/cri-client | v0.36.2 | Apache-2.0 | — |
| k8s.io/kube-openapi | v0.0.0-20260319004828-5883c5ee87b9 | Apache-2.0 | — |
| modernc.org/cc/v4 | v4.29.7 | BSD-3-Clause | — |
| modernc.org/ccgo/v4 | v4.36.1 | BSD-3-Clause | — |
| modernc.org/fileutil | v1.4.0 | BSD-3-Clause | — |
| modernc.org/gc/v2 | v2.6.5 | BSD-3-Clause | — |
| modernc.org/gc/v3 | v3.1.5 | BSD-3-Clause | — |
| modernc.org/goabi0 | v0.2.0 | BSD-3-Clause | — |
| modernc.org/opt | v0.2.0 | BSD-3-Clause | — |
| modernc.org/sortutil | v1.2.1 | BSD-3-Clause | — |
| modernc.org/strutil | v1.2.1 | BSD-3-Clause | — |
| modernc.org/token | v1.1.0 | BSD-3-Clause | — |
| pgregory.net/rapid | v1.2.0 | MPL-2.0 | — |
| sigs.k8s.io/knftables | v0.0.18 | Apache-2.0 | — |
| sigs.k8s.io/randfill | v1.0.0 | Apache-2.0 | — |
| sigs.k8s.io/structured-merge-diff/v6 | v6.3.2 | Apache-2.0 | — |
Linux thin binaries embed one zstd bundle. The bundle contains the fat runtime, containerd-shim-runc-v2, crun, the CNI multicall, a staged subset of k3s-root (bin/busybox, bin/ip, bin/aux), and images/pause.tar.gz. SQLite is linked into that fat runtime and into the desktop binaries. The Linux thin ELF does not link it.
k3s-root hashes in this document are the upstream tarball pins from scripts/version.sh. They are not hashes of the staged subset. The k3s-root source repository is Apache-2.0 for its build scripts and Buildroot config. That license does not cover the programs in the tarball; those are the GPL components listed above. The pause hash is the multi-arch image index digest. The archive is retagged portainer/pause:latest so the CRI sandbox ref stays stable. The pause binary is Kubernetes build/pause/linux/pause.c, which is Apache-2.0. portainer/kubesolo compiles that source; the MIT license of the kubesolo repository does not cover the image.
Corresponding source for GPL binaries: crun at the pinned tag, and k3s-root at the pinned tag (buildroot config in that tag builds BusyBox, iproute2, iptables, nftables, ebtables, and util-linux).
Full license texts are in LICENSE-3RD-PARTY.md.
- No hash of a built
edgeletbinary. That hash is on the release SBOM. - No file-level analysis of Go module contents. SPDX
filesAnalyzedis false. - The subject version is
NOASSERTIONbecause this file describes the tree, not a release tag. - Timestamps are the Unix epoch so a regeneration of an unchanged tree is byte-identical.