Pin container image versions

This commit is contained in:
katexochen 2022-10-07 16:13:49 +02:00
parent fd63ca1251
commit 9a4f90af50
3 changed files with 5 additions and 5 deletions

View File

@ -1,4 +1,4 @@
FROM ubuntu:22.04 as build
FROM ubuntu:22.04@sha256:a8fe6fd30333dc60fc5306982a7c51385c2091af1e0ee887166b40a905691fd0 as build
# Install packages
RUN apt-get update && apt-get install -y \

View File

@ -1,4 +1,4 @@
FROM fedora:36 as build
FROM fedora:36@sha256:486fd5578f93fbc57a519e34ad4b7cac927c3f8a95409baedf0c19e9f287c207 as build
RUN dnf -y update && \
dnf -y install libvirt-devel @development-tools pkg-config wget git && \
@ -24,7 +24,7 @@ COPY . /qemu-metadata-api
WORKDIR /qemu-metadata-api/hack/qemu-metadata-api
RUN go build -o api-server ./main.go
FROM fedora:36 as release
FROM fedora:36@sha256:486fd5578f93fbc57a519e34ad4b7cac927c3f8a95409baedf0c19e9f287c207 as release
RUN dnf -y install libvirt-devel && \
dnf clean all
COPY --from=build /qemu-metadata-api/hack/qemu-metadata-api/api-server /server

View File

@ -1,5 +1,5 @@
# Build the manager binary
FROM golang:1.19.2 as builder
FROM golang:1.19.2@sha256:0467d7d12d170ed8d998a2dae4a09aa13d0aa56e6d23c4ec2b1e4faacf86a813 as builder
WORKDIR /workspace
# Copy the Go Modules manifests
@ -20,7 +20,7 @@ RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager main.go
# Use distroless as minimal base image to package the manager binary
# Refer to https://github.com/GoogleContainerTools/distroless for more details
FROM gcr.io/distroless/static:nonroot
FROM gcr.io/distroless/static:nonroot@sha256:380318dd91fd3bea73ae5fe1eb4d795ef7923f576e6f5f8d4de6ef1ea18ed540
WORKDIR /
COPY --from=builder /workspace/manager .
USER 65532:65532