LinusandClaude Opus 5.5
dbce497f95
binwalk: new binwalk-build stage adapted from binwalk's own Dockerfile to Ubuntu 24.04, with every source pinned: binwalk master (3.1.1), Rust 1.99.1, dumpifs/lzfse/dmg2img commits, and the Python extractors (jefferson, ubi-reader, uefi_firmware, vmlinux-to-elf, lz4, zstandard) in /opt/binwalk-py. The final image adds upstream's apt extractors, sasquatch (SHA-256 pinned), and Kaleido via KALEIDO_PATH so that binwalk -E -p works (binwalk's build otherwise leaves it in /root of the build stage and -p panics). BINWALK_RM_EXTRACTION_SYMLINK=1 avoids dangling links to container paths. esptool 5.6.0 in /opt/esptool. Entry points of both venvs are linked into /usr/local/bin without shadowing the system python3. ESP32 flash loader: dynacylabs/ghidra-esp32-flash-loader, built in an esp32-loader-build stage against Ghidra 12.1.4 (no binaries are published, and the older forks don't compile against Ghidra 12), pinned to a master commit with its svd and ghidra_scripts submodules, Gradle checked against gradle.org's SHA-256. Installed into Ghidra/Extensions/esp32. Ghidra itself is now downloaded once in a ghidra-dist stage and copied into the final image and the build stage. Verified: binwalk extracted squashfs/gzip/cpio/7z from a test image and rendered an entropy PNG; the loader imported a test ESP32 app image and a flash dump with bootloader at 0x0 (partition table, bootloader and factory app, SVD peripherals, ROM symbols). Original-ESP32 dumps with the bootloader at 0x1000 are not supported; documented in CLAUDE.md. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>