diff --git a/Dockerfile.createtree.rh b/Dockerfile.createtree.rh index d19d5ec3bc..1a4584fcc4 100644 --- a/Dockerfile.createtree.rh +++ b/Dockerfile.createtree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build-env ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -23,7 +23,7 @@ RUN go mod download && \ gzip createtree-windows-amd64.exe # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:57c8151c51445a07e503dab9dc9211dc3cdeac9d45ed81a10954b7d770659b3b AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=build-env /opt/app-root/src/createtree / diff --git a/Dockerfile.database.rh b/Dockerfile.database.rh index fc4a937a50..8d04553aac 100644 --- a/Dockerfile.database.rh +++ b/Dockerfile.database.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/mariadb-105@sha256:d44f3ef95ac295c454932fdecd35ce0d418eef71700b2948cf985dd2616d6a5d +FROM registry.redhat.io/rhel9/mariadb-105@sha256:72950fcd14b826eff33d288d968fd3e5fa0887a296262d16ee313bbd00334af9 USER root diff --git a/Dockerfile.logserver.rh b/Dockerfile.logserver.rh index d9b2a361cc..40ec8acd85 100644 --- a/Dockerfile.logserver.rh +++ b/Dockerfile.logserver.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:57c8151c51445a07e503dab9dc9211dc3cdeac9d45ed81a10954b7d770659b3b AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_server / diff --git a/Dockerfile.logsigner.rh b/Dockerfile.logsigner.rh index 42a215f2f7..e756ae9bd2 100644 --- a/Dockerfile.logsigner.rh +++ b/Dockerfile.logsigner.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS builder ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -16,7 +16,7 @@ ADD ./ $APP_ROOT/src/ RUN go build -mod=mod -v ./cmd/trillian_log_signer # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:57c8151c51445a07e503dab9dc9211dc3cdeac9d45ed81a10954b7d770659b3b AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=builder /opt/app-root/src/trillian_log_signer / diff --git a/Dockerfile.netcat.rh b/Dockerfile.netcat.rh index 1c46ac0744..9ed546c7a7 100644 --- a/Dockerfile.netcat.rh +++ b/Dockerfile.netcat.rh @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:57c8151c51445a07e503dab9dc9211dc3cdeac9d45ed81a10954b7d770659b3b +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 LABEL description="Netcat is a computer networking utility for reading from and writing to network connections using TCP or UDP." diff --git a/Dockerfile.redis.rh b/Dockerfile.redis.rh index f28f7402de..6c82d314de 100644 --- a/Dockerfile.redis.rh +++ b/Dockerfile.redis.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/rhel9/redis-6@sha256:a6349fc0eee7cb05f8524344f556be81b86ee66f43612e76a1294c302735afde +FROM registry.redhat.io/rhel9/redis-6@sha256:3b878f349dff429de14fd7795497d41b1cddebf7325653a6fac0133349c6179a LABEL description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." LABEL io.k8s.description="Securesign redis is built ontop of rhel9/redis-6 but accepts external connections and runs appendonly mode with full durability." diff --git a/Dockerfile.updatetree.rh b/Dockerfile.updatetree.rh index 95ed3ed864..6a802ffd57 100644 --- a/Dockerfile.updatetree.rh +++ b/Dockerfile.updatetree.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1788409979@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build-env ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT ENV CGO_ENABLED=1 @@ -24,7 +24,7 @@ RUN go mod download && \ # Multi-Stage production build -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:57c8151c51445a07e503dab9dc9211dc3cdeac9d45ed81a10954b7d770659b3b AS deploy +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:7fbeae18dc9476399f565e68255f602a3374ea8614ba3d14843565131a13ff93 AS deploy # Retrieve the binary from the previous stage COPY --from=build-env /opt/app-root/src/updatetree / diff --git a/examples/deployment/docker/db_server/postgresql/Dockerfile b/examples/deployment/docker/db_server/postgresql/Dockerfile index 2f1fb61d99..5114e0713f 100644 --- a/examples/deployment/docker/db_server/postgresql/Dockerfile +++ b/examples/deployment/docker/db_server/postgresql/Dockerfile @@ -1,4 +1,4 @@ -FROM postgres:17.10@sha256:7958605b474b3d264a969cb3a123d6aa00ad1e1fe9da8a69984dabb704d93317 +FROM postgres:17.11@sha256:67f41722b7a8cbdb868a44a4995c846eddfdc2973bccb291ce937dce88ad5675 # expects the build context to be: $GOPATH/src/github.com/google/trillian COPY storage/postgresql/schema/storage.sql /docker-entrypoint-initdb.d/storage.sql diff --git a/examples/deployment/docker/log_server/Dockerfile b/examples/deployment/docker/log_server/Dockerfile index 791a456675..7277c11dfd 100644 --- a/examples/deployment/docker/log_server/Dockerfile +++ b/examples/deployment/docker/log_server/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_server RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_server --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:62730825d3cf03571e0a1b8f014748de94d0404500f063593b614c23da38841d +FROM gcr.io/distroless/base-debian12@sha256:fabbf1c0c357a3d42550111351daed089b20a2c954df13ee2fcff60602515e84 COPY --from=build /go/bin/trillian_log_server / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/docker/log_signer/Dockerfile b/examples/deployment/docker/log_signer/Dockerfile index 25b4f8db8a..e5a5d1c7c7 100644 --- a/examples/deployment/docker/log_signer/Dockerfile +++ b/examples/deployment/docker/log_signer/Dockerfile @@ -18,7 +18,7 @@ RUN go install ./cmd/trillian_log_signer RUN go run github.com/google/go-licenses/v2 save ./cmd/trillian_log_signer --save_path /THIRD_PARTY_NOTICES # Make a minimal image. -FROM gcr.io/distroless/base-debian12@sha256:62730825d3cf03571e0a1b8f014748de94d0404500f063593b614c23da38841d +FROM gcr.io/distroless/base-debian12@sha256:fabbf1c0c357a3d42550111351daed089b20a2c954df13ee2fcff60602515e84 COPY --from=build /go/bin/trillian_log_signer / COPY --from=build /THIRD_PARTY_NOTICES /THIRD_PARTY_NOTICES diff --git a/examples/deployment/kubernetes/mysql/image/Dockerfile b/examples/deployment/kubernetes/mysql/image/Dockerfile index 22cb6913b7..29997bfee5 100644 --- a/examples/deployment/kubernetes/mysql/image/Dockerfile +++ b/examples/deployment/kubernetes/mysql/image/Dockerfile @@ -13,7 +13,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea +FROM ubuntu:noble@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517 # Patch the OS-level packages and remove unneeded dependencies. RUN apt-get update \