Software bills of materials

An SPDX 2.3 SBOM for every MFConsole image you can pull from Docker Hub. Each is generated from the image as it was pushed, so it lists everything in that image: the operating-system packages and the Python packages. The image digest below is the one the SBOM describes; check it against the image you run.

1.3.0-rc12 latest

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc12
Image digest
sha256:9c57574e4f04c060d8bbd626ead40f180ccab183c9177d0b9ab69f5c2fe4f841
Packages
357
Generated
2026-10-15, from the image as pushed
File SHA-256
a0e106ed7ed6c028f7d7914cec6a54f968e709849e60ed157b3b4d4230409aea

1.3.0-rc11.5

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc11.5
Image digest
sha256:f789f3d5aa92e2bce837b758935a086bc80f763e0c5817762f62ee6654e35999
Packages
357
Generated
2026-10-07, from the image as pushed
File SHA-256
fbc7b5496fc5bec99d1c274424bfe6d4d1a4e3d80e174b57cc4074b54a3216c8

1.3.0-rc6.6

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc6.6
Image digest
sha256:ab7595a36a17b3804bd5e15746df362629c1c7201cfd2c9e33957d423a89d743
Packages
357
Generated
2026-10-05, from the image as pushed
File SHA-256
8f4b93ddb4f60d328680b8dcb32211f354dfa117208e342d765e46ee9c253368

1.3.0-rc6.3

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc6.3
Image digest
sha256:67169018fbd0382362b143fd578aff5a61eac179275f1e53775c7f32640106ae
Packages
357
Generated
2026-10-04, from the image as pushed
File SHA-256
9d98c0b70fc4f8e973d2f452bf8bdf5bf5b007d53b3a28aedda4de39e4e05607

1.3.0-rc5.5

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc5.5
Image digest
sha256:b7d825394d2121122f7f10e0a93698b458d1acc01e4c89eff50d161284b2b967
Packages
357
Generated
2026-10-02, from the image as pushed
File SHA-256
ebc89fcd87d4f15a534afef5b5ae0fa8924ff332579dbbe6c4eab99ebb3b897f

1.3.0-rc4

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc4
Image digest
sha256:0b53948947a36bcc5a9e1dbedf41e5e58693f0f0d73185b05ee8d00feaf3f9e0
Packages
357
Generated
2026-10-02, from the image as pushed
File SHA-256
2c0e2be70339cff4b575ab6d4f87360c341cbdc0dd20f2fb1927281f487e038f

1.3.0-rc1.1

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.3.0-rc1.1
Image digest
sha256:5874fcb15f138ccd1fba1867e23e65ce5aefe8d46f2fc7ec786432a008125219
Packages
357
Generated
2026-10-01, from the image as pushed
File SHA-256
54d14db917b881d54a611018ba856f25e710af8faf4a2d340f9461216577db62

1.2.0-rc5.1

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.2.0-rc5.1
Image digest
sha256:9d3f04dce3183b98e4527a6f22c5c091b4911dee02fb7644fdc924405a4ecb3a
Packages
357
Generated
2026-10-01, from the image as pushed
File SHA-256
ac2e329bfef25a8cf724ececee116e929d73e1d6ccc4588971360a3fe9ca8b03

1.2.0-rc5

SPDX JSON · 9.9 MB
Image
docker.io/mfconsole/kvm-manager:1.2.0-rc5
Image digest
sha256:e534ee805f0fe324df58ee6f3a5f71db13d2e4ed10bcb21ccde9ca2d4d5faefa
Packages
357
Generated
2026-10-01, from the image as pushed
File SHA-256
efdeff262df7936a5e71ff8733327c669162b4fa74a6f635e642062e5ee560ac

Check a download

All checksums are in SHA256SUMS. To check an SBOM and the image it describes:

curl -fsSLO https://mfcloud.io/sbom/SHA256SUMS
curl -fsSLO https://mfcloud.io/sbom/kvm-manager-1.3.0-rc12.spdx.json
sha256sum --ignore-missing -c SHA256SUMS

# the digest of the image you pulled must match the one above
docker pull docker.io/mfconsole/kvm-manager:1.3.0-rc12
docker inspect --format '{{index .RepoDigests 0}}' docker.io/mfconsole/kvm-manager:1.3.0-rc12

Older images that are no longer on Docker Hub aren’t listed. For an SBOM of one of those, or a question about a component, write to [email protected].