# Corresponding source and rebuild recipe

Published image: `oci.thepeoples.io/hardened/envoy:v1.39.3-tpio.1`.

The upstream source archives and exact packaging/rebuild recipes are provided here. Verify SHA256SUMS before rebuilding. Build-records contain the recorded installed-package manifest from this published image. Archives retain their upstream licences.

## GPL corresponding source (Ubuntu packages)

This image is ladder (c): the upstream Envoy binary plus an apt dist-upgrade layer. Ubuntu packages such as bash, coreutils, grep, gzip, tar and util-linux are GPL. The installed-package manifest is `build-records/tp-hardened.dpkg-manifest`. Ubuntu corresponding source for those exact versions is published by Canonical. The Envoy proxy corresponding source is the linked upstream archive. Archives retain their upstream licences.