diff --git a/Dockerfile b/Dockerfile index a1006e92f..ffa69cfa4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -29,7 +29,7 @@ RUN go build -ldflags "${SERVER_LDFLAGS}" ./cmd/timestamp-server RUN CGO_ENABLED=0 go build -gcflags "all=-N -l" -ldflags "${SERVER_LDFLAGS}" -o timestamp-server_debug ./cmd/timestamp-server # debug compile options & debugger -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:ad9d042375cef55890db3378ced9d0cebd74656bc8dc4c3b0cdbea31b85ce459 as debug +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:4894a8eabc8bd22de569090ef9c3da7c10dce981f03f8bfd6a9b129d37445048 as debug RUN go install github.com/go-delve/delve/cmd/dlv@v1.9.0 # overwrite server and include debugger diff --git a/Dockerfile.cli-stack.rh b/Dockerfile.cli-stack.rh index 18722e2fe..84b1d0703 100644 --- a/Dockerfile.cli-stack.rh +++ b/Dockerfile.cli-stack.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS build-cross-platform +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS build-cross-platform ENV APP_ROOT=/opt/app-root \ GOPATH=/opt/app-root @@ -17,7 +17,7 @@ FROM --platform=linux/arm64 quay.io/securesign/fetch-tsa-certs@sha256:219b0480 FROM --platform=linux/ppc64le quay.io/securesign/fetch-tsa-certs@sha256:168bfa4555404d39b0068761ad128beed518bf6eb4a9321cbada44db0fa6aba2 AS build-ppc64le FROM --platform=linux/s390x quay.io/securesign/fetch-tsa-certs@sha256:f3014621a010f25d1c52581517510e91568cd2a32d00d7cf5098c60a53ce694f AS build-s390x -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS packager +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS packager USER root RUN mkdir -p /binaries @@ -54,7 +54,7 @@ RUN tar -czf /binaries/fetch_tsa_certs_windows_amd64.tar.gz -C /tmp fetch_tsa_ce RUN chmod -R a+rX /binaries # Final minimal image with all binaries -FROM registry.redhat.io/ubi9/ubi-micro:9.8-1782840931@sha256:35de56a9413112f1474e392ebc35e0cf6f0fb484c8e8877bbae59b513694b41f +FROM registry.redhat.io/ubi9/ubi-micro:9.8-1784702951@sha256:b1e86b97028b8fcfb6d85f997c39e6b6b67496163ef8d80d243220a4918e8bef LABEL description="Flat image containing fetch-tsa-certs CLI binaries for all platforms and architectures" LABEL io.k8s.description="Flat image containing fetch-tsa-certs CLI binaries for all platforms and architectures" diff --git a/Dockerfile.fetch_tsa_certs.rh b/Dockerfile.fetch_tsa_certs.rh index 3c9daa815..c83b99bc8 100644 --- a/Dockerfile.fetch_tsa_certs.rh +++ b/Dockerfile.fetch_tsa_certs.rh @@ -1,4 +1,4 @@ -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 as build-env +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 as build-env USER root ENV APP_ROOT=/opt/app-root ENV GOPATH=$APP_ROOT @@ -16,7 +16,7 @@ ADD ./Build.mak $APP_ROOT/src/Build.mak RUN go mod edit -godebug=fips140=auto && \ make -f Build.mak fetch-tsa-certs-linux -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:062c52ff973065752b0965787649db2bcf551a6c727a00e95a3eb42cebadbdab +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:dd334afa72444fa46238fcf9e6bd399245adf746378735348cf84b9dfdca38f1 ENV APP_ROOT=/opt/app-root WORKDIR $APP_ROOT/src/ diff --git a/Dockerfile.tsa.rh b/Dockerfile.tsa.rh index f8566fae1..206ebc961 100644 --- a/Dockerfile.tsa.rh +++ b/Dockerfile.tsa.rh @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS builder +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS builder USER root ENV CGO_ENABLED=0 ENV GOFIPS140=v1.0.0 @@ -31,14 +31,14 @@ RUN git config --global --add safe.directory /opt/app-root/src && \ go build -mod=readonly -tags=no_openssl -ldflags "${SERVER_LDFLAGS}" ./cmd/timestamp-server # debug compile options & debugger -FROM registry.redhat.io/ubi9/go-toolset:9.8-1784190466@sha256:f99dd81b20e5971ef9f63a51ac27cf0aa591ff9921d021490548b67fd9b17144 AS debug +FROM registry.redhat.io/ubi9/go-toolset:9.8-1785791459@sha256:46376c6723c3a4961a165c2768461e7fac48a79932cdde0a6e6a57724ef61ba0 AS debug RUN go install github.com/go-delve/delve/cmd/dlv@v1.9.0 # overwrite server and include debugger COPY --from=builder /opt/app-root/src/timestamp-server_debug /usr/local/bin/timestamp-server # Multi-Stage production build -FROM registry.access.redhat.com/ubi9-minimal@sha256:932acc913841596b4bdb1dfb6280987b81c2d9f4d337d0a57c9a98fc749e10bd AS deploy +FROM registry.access.redhat.com/ubi9-minimal@sha256:31648959f2cf4e3fdd14801905e4339fef1d4457763e80094ed30f69562f0a63 AS deploy LABEL description="The timestamp-authority is a process that provides a timestamp record of when a document was created or modified." LABEL io.k8s.description="The timestamp-authority is a process that provides a timestamp record of when a document was created or modified."