Skip to content

Pinning of test/container/Dockerfile container images by digest hashes #12622

@adamiBs

Description

@adamiBs

Summary

In accordance with #12618 (comment), This is an issue for the tracking of our move to digest hashes instead of images tags.

Motivation

This would increase future predictability of the Dockerfile's behavior by providing an immutable digest for each image instead of mutable tags

Proposal

By execution of Crane commands in order to retrieve the image digests (Thanks to @34fathombelow for the explanation):

$ crane digest docker.io/library/redis:7.0.5
sha256:dfeb5451fce377ab47c5bb6b6826592eea534279354bbfc3890c0b5e9b57c763
$ crane digest docker.io/library/node:12.18.4-buster
sha256:7f4090a3fea631e703f4afe5cc5504143970d669a2c13b4e5edf3f830c9b4c96
$ crane digest docker.io/library/golang:1.19
sha256:7ce31d15a3a4dbf20446cccffa4020d3a2974ad2287d96123f55caf22c7adb71
$ crane digest docker.io/library/registry:2.8
sha256:3f71055ad7c41728e381190fee5c4cf9b8f7725839dcf5c0fe3e5e20dc5db1fa
$ crane digest docker.io/bitnami/kubectl:1.26
sha256:625467eb8c3a3d60232923404941c32e787eb9003e644d0fa8258b0efa7f6a7f
$ crane digest ubuntu:22.04
sha256:9a0bdde4188b896a372804be2384015e90e3f84906b750c1a53539b585fbbe7f

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions