diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index 1ed6964dbe..45e5f75ffb 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS build-cross-platform +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build-cross-platform ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ CGO_ENABLED=0 \ @@ -24,7 +24,7 @@ FROM --platform=linux/arm64 quay.io/securesign/trillian-updatetree@sha256:d3d7 FROM --platform=linux/ppc64le quay.io/securesign/trillian-updatetree@sha256:9bd519e8a801da58e6f8fcac9aa786d040ca7b626bdb75642e783138082f004f AS updatetree-ppc64le FROM --platform=linux/s390x quay.io/securesign/trillian-updatetree@sha256:689b66e54119ee8204e5bf7ac63d10635272c911d4b43279004a1df98f0d0ec0 AS updatetree-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS packager USER root RUN mkdir -p /binaries @@ -91,7 +91,7 @@ RUN tar -czf /binaries/updatetree_windows_amd64.tar.gz -C /tmp updatetree.exe && RUN chmod -R a+rX /binaries # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-micro:9.8-1784702951@sha256:b1e86b97028b8fcfb6d85f997c39e6b6b67496163ef8d80d243220a4918e8bef +FROM registry.redhat.io/ubi9/ubi-micro:9.8-1787778798@sha256:f332c99eb8f798a8486821c91937f10ad64ee83d7e739303be2df051040918f6 LABEL description="Flat image containing createtree and updatetree CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing createtree and updatetree CLI binaries for all platforms and architectures" diff --git a/Dockerfile.createtree.rh b/Dockerfile.createtree.rh index f8882b7d83..1da80f7319 100644 --- a/Dockerfile.createtree.rh +++ b/Dockerfile.createtree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS build +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ CGO_ENABLED=1 \ @@ -14,7 +14,7 @@ RUN go mod download && \ go build -mod=mod -o createtree -trimpath ./cmd/createtree # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:17fd831ced9434de0a984d60b3fbe61008308261ba98bbc348d6fbdef05fa7c0 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Add license file COPY LICENSE /licenses/LICENSE diff --git a/Dockerfile.database.rh b/Dockerfile.database.rh index 60695d26dd..8d04553aac 100644 --- a/Dockerfile.database.rh +++ b/Dockerfile.database.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/mariadb-105@sha256:74fcde40f9d9d5232b27ff78084761e77420482859dde5b1b31686d198d43044 +FROM registry.redhat.io/rhel9/mariadb-105@sha256:72950fcd14b826eff33d288d968fd3e5fa0887a296262d16ee313bbd00334af9 USER root diff --git a/Dockerfile.logserver.rh b/Dockerfile.logserver.rh index b2bbd00ffb..40ec8acd85 100644 --- a/Dockerfile.logserver.rh +++ b/Dockerfile.logserver.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:17fd831ced9434de0a984d60b3fbe61008308261ba98bbc348d6fbdef05fa7c0 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_server / diff --git a/Dockerfile.logsigner.rh b/Dockerfile.logsigner.rh index a095ff02b3..e756ae9bd2 100644 --- a/Dockerfile.logsigner.rh +++ b/Dockerfile.logsigner.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_signer # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:17fd831ced9434de0a984d60b3fbe61008308261ba98bbc348d6fbdef05fa7c0 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_signer / diff --git a/Dockerfile.netcat.rh b/Dockerfile.netcat.rh index 40df930794..bc77e5c1f5 100644 --- a/Dockerfile.netcat.rh +++ b/Dockerfile.netcat.rh @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:17fd831ced9434de0a984d60b3fbe61008308261ba98bbc348d6fbdef05fa7c0 +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 LABEL description="Netcat is a computer networking utility for reading from and writing to network connections using TCP or UDP." LABEL io.k8s.description="netcat is a computer networking utility for reading from and writing to network connections using TCP or UDP." diff --git a/Dockerfile.redis.rh b/Dockerfile.redis.rh index 110b0abedd..6c82d314de 100644 --- a/Dockerfile.redis.rh +++ b/Dockerfile.redis.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/redis-6@sha256:336839f22a5f0665a3ec338c2db19e7a69212a9eeb5de44a40a45c577da4edcb +FROM registry.redhat.io/rhel9/redis-6@sha256:3b878f349dff429de14fd7795497d41b1cddebf7325653a6fac0133349c6179a LABEL description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." LABEL io.k8s.description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." diff --git a/Dockerfile.updatetree.rh b/Dockerfile.updatetree.rh index 62712c3ca1..fb991876fb 100644 --- a/Dockerfile.updatetree.rh +++ b/Dockerfile.updatetree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1785360201@sha256:272a3dd990bba320c2e246119a0019d10d627d0104938d5db77ba5ab3ae3a51d AS build +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root \ CGO_ENABLED=1 \ @@ -14,7 +14,7 @@ RUN go mod download && \ go build -mod=mod -o updatetree -trimpath ./cmd/updatetree # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:17fd831ced9434de0a984d60b3fbe61008308261ba98bbc348d6fbdef05fa7c0 AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Add license file COPY LICENSE /licenses/LICENSE diff --git a/examples/deployment/docker/db_server/postgresql/Dockerfile b/examples/deployment/docker/db_server/postgresql/Dockerfile index fe45a3ba5d..b0d172ddda 100644 --- a/examples/deployment/docker/db_server/postgresql/Dockerfile +++ b/examples/deployment/docker/db_server/postgresql/Dockerfile @@ -1,4 +1,4 @@ -FROM postgres:18.4@sha256:3a82e1f56c8f0f5616a11103ac3d47e632c3938698946a7ad26da0df1334744a +FROM postgres:18.6@sha256:4ef4dbc939d61acea57712655ddb4b4ab27419c913f94cca0cd57cb3ea3c2280 # expects the build context to be: $GOPATH/src/github.com/google/trillian COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql diff --git a/examples/deployment/docker/log_server/Dockerfile b/examples/deployment/docker/log_server/Dockerfile index d552f48405..85be580752 100644 --- a/examples/deployment/docker/log_server/Dockerfile +++ b/examples/deployment/docker/log_server/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:62730825d3cf03571e0a1b8f014748de94d0404500f063593b614c23da38841d +FROM gcr.io/distroless/base-debian12@sha256:fabbf1c0c357a3d42550111351daed089b20a2c954df13ee2fcff60602515e84 COPY --from=build /go/bin/trillian_log_server / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/docker/log_signer/Dockerfile b/examples/deployment/docker/log_signer/Dockerfile index ca38e7488d..d42022fcd8 100644 --- a/examples/deployment/docker/log_signer/Dockerfile +++ b/examples/deployment/docker/log_signer/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:62730825d3cf03571e0a1b8f014748de94d0404500f063593b614c23da38841d +FROM gcr.io/distroless/base-debian12@sha256:fabbf1c0c357a3d42550111351daed089b20a2c954df13ee2fcff60602515e84 COPY --from=build /go/bin/trillian_log_signer / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/kubernetes/mysql/image/Dockerfile b/examples/deployment/kubernetes/mysql/image/Dockerfile index 73d0b687e2..7ed2c13f54 100644 --- a/examples/deployment/kubernetes/mysql/image/Dockerfile +++ b/examples/deployment/kubernetes/mysql/image/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM ubuntu:resolute@sha256:3131b4cc82a783df6c9df078f86e01819a13594b865c2cad47bd1bca2b7063bb +FROM ubuntu:resolute@sha256:2260313b31c8c011cd2eebe728008efac1b3982be73eb71348ea2648d2c0e09b # Patch the OS-level packages and remove unneeded dependencies. RUN apt-get update \