AUTHENTICATED ARTIFACT WORKSPACE
Build once.
Keep the layers.
Manage cloud images, SquashFS layers and immutable native packages. Credentials stay in this tab's memory, never browser storage. Use HTTPS outside localhost.
Legacy images & layers
Present the original Keystone token and its immutable project ID. The server checks current authority; visible public artifacts are not proof of project membership.
Connected identity
CONTENT-ADDRESSED
Images & layers
Verified downloads are streamed in chunks. Administrator deletion refuses layers with children; blob garbage collection is deferred.
REGISTER
Upload an artifact
Whole-file SHA-256 is calculated before transfer and validated again by the server. Registration metadata is locked for each session. Resume with the same file or abort before replacing it.
SERVER BUILD
Build a layer
Requires current system-administrator authority and a configured isolated host worker. No recipe runs in the API process.