Merge pull request #40 from Dstack-TEE/pin-digest

Pin docker image digests

Author: h4x3rotab

custom-domain/dstack-ingress/README.md

@@ -52,7 +52,7 @@ The fastest way to get started is to use our pre-built image. Simply use the fol
 ```yaml
 services:
   dstack-ingress:
-    image: kvin/dstack-ingress@sha256:8dfc3536d1bd0be0cb938140aeff77532d35514ae580d8bec87d3d5a26a21470
+    image: kvin/dstack-ingress@sha256:0f9d97aee13764895f967a00874418330a56e20cf4b0a4c2700934c5755b3350
     ports:
       - "443:443"
     environment:

custom-domain/dstack-ingress/docker-compose.yaml

@@ -1,6 +1,6 @@
 services:
   dstack-ingress:
-    image: kvin/dstack-ingress@sha256:8fad2a37bf2b4d2f9529e8953bca341bea17475b72d0ba746789395e5eace9d1
+    image: kvin/dstack-ingress@sha256:0f9d97aee13764895f967a00874418330a56e20cf4b0a4c2700934c5755b3350
     ports:
       - "443:443"
     environment:

launcher/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   launcher:
-    image: kvin/launcher@sha256:873dd2117b0159575d62b79863dafd984cd02be25b46ff164e3b83ed5c9642f7
+    image: kvin/launcher@sha256:7da8216283685c2ba94d2921bb23776cdca1849b1a87bfbde61b5ca13abed128
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     restart: always

lightclient/docker-compose.yml

@@ -8,7 +8,7 @@ services:
     build:
       context: .
       dockerfile_inline: |
-        FROM ubuntu:22.04
+        FROM ubuntu:22.04@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eee
         RUN apt-get update && apt install -y curl wget
         WORKDIR /root
 

prelaunch-script/docker-compose.yaml

@@ -1,6 +1,6 @@
 services:
   busybox:
-    image: busybox:latest
+    image: busybox@sha256:f85340bf132ae937d2c2a763b8335c9bab35d6e8293f70f606b9c6178d84f42b
     command: sh -c "cat /etc/motd"
     volumes:
       - /tapp/motd:/etc/motd

ssh-over-gateway/docker-compose.yaml

@@ -3,7 +3,7 @@ services:
     build:
       context: .
       dockerfile_inline: |
-        FROM ubuntu:latest
+        FROM ubuntu:22.04@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eee
         RUN apt-get update && apt-get install -y openssh-server sudo
         RUN mkdir /run/sshd
         RUN echo 'root:${ROOT_PW:-123456}' | chpasswd

timelock-nts/docker-compose.yml

@@ -8,7 +8,7 @@ services:
     build:
       context: .
       dockerfile_inline: |
-        FROM ubuntu:22.04
+        FROM ubuntu:22.04@sha256:01a3ee0b5e413cefaaffc6abe68c9c37879ae3cced56a8e088b1649e5b269eee
         RUN apt-get update
         RUN apt install -y curl openssl ntpsec-ntpdate
     command: bash run.sh

tor-hidden-service/docker-compose.yml

@@ -3,7 +3,7 @@ services:
     build:
       context: .
       dockerfile_inline: |
-        FROM debian:bullseye-slim
+        FROM debian:bullseye-slim@sha256:779034981fec838da124ff6ab9211499ba5d4e769dabdfd6c42c6ae2553b9a3b
         RUN apt-get update && apt-get install -y tor && apt-get clean && rm -rf /var/lib/apt/lists/*
         RUN mkdir -p /var/lib/tor/hidden_service && chown -R debian-tor:debian-tor /var/lib/tor/hidden_service/ && \
             chmod 700 /var/lib/tor/hidden_service/ && echo "HiddenServiceDir /var/lib/tor/hidden_service/" > /etc/tor/torrc && \
@@ -18,7 +18,7 @@ services:
 
   nginx:
     depends_on: [tor]
-    image: nginx:alpine
+    image: nginx:alpine@sha256:65645c7bb6a0661892a8b03b89d0743208a18dd2f3f17a54ef4b76fb8e2f2a10
     volumes:
       - /var/run/tappd.sock:/var/run/tappd.sock
       - tor_data:/tor_data:ro

webshell/docker-compose.yaml

@@ -1,6 +1,6 @@
 services:
   ttypd:
-    image: hackinglab/alpine-ttyd-bash:3.2
+    image: hackinglab/alpine-ttyd-bash:3.2@sha256:ccf936e52a19948b55737ba812ccee1a2ad3d0e8b8b7268fd09595259131e265
     environment:
       - HL_USER_USERNAME=root
       - HL_USER_PASSWORD=suon7eeXuGeechee