From a1e679681da31c7d8735a2a7fc871f386be20ba4 Mon Sep 17 00:00:00 2001 From: Adam Kaplan Date: Fri, 8 Nov 2024 16:33:48 -0500 Subject: [PATCH] Update Dockerfile with Immutable Tags Use Red Hat's immutable tags to ensure reproducible builds. This will also teach Renovate to only apply z-stream updates for ubi8/go-toolset, and y-stream updates for ubi8/ubi-minimal. Signed-off-by: Adam Kaplan --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index e27ef3a4c..9c0f6c1f4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi8/go-toolset:1.21 AS builder +FROM registry.redhat.io/ubi8/go-toolset:1.21.13-1.1727869850 AS builder ENV S2I_GIT_VERSION="1.4.1" \ S2I_GIT_MAJOR="1" \ @@ -12,7 +12,7 @@ RUN CGO_ENABLED=0 GO111MODULE=on go build -a -mod=vendor -ldflags="-s -w" -o /tm # Runner Image # -FROM registry.redhat.io/ubi8/ubi-minimal:8.10 +FROM registry.redhat.io/ubi8/ubi-minimal:8.10-1130 COPY --from=builder /tmp/s2i /usr/local/bin/s2i