Reference docker images using sha256 digests (#12)

xxuejie · web-flow · commit b719fb02597c · 2024-07-08T22:04:29.000+08:00
diff --git a/standalone-contract/scripts/reproducible_build_docker b/standalone-contract/scripts/reproducible_build_docker
@@ -7,7 +7,8 @@
 set -ex
 
 DOCKER="${DOCKER:-docker}"
-DOCKER_IMAGE="${DOCKER_IMAGE:-docker.io/cryptape/llvm-n-rust:20240630}"
+# docker pull docker.io/cryptape/llvm-n-rust:20240630
+DOCKER_IMAGE="${DOCKER_IMAGE:-docker.io/cryptape/llvm-n-rust@sha256:bafaf76d4f342a69b8691c08e77a330b7740631f3d1d9c9bee4ead521b29ee55}"
 CHECKSUM_FILE_PATH="${CHECKSUM_FILE_PATH:-checksums.txt}"
 
 # We are parsing command line arguments based on tips from:
diff --git a/workspace/scripts/reproducible_build_docker b/workspace/scripts/reproducible_build_docker
@@ -7,7 +7,8 @@
 set -ex
 
 DOCKER="${DOCKER:-docker}"
-DOCKER_IMAGE="${DOCKER_IMAGE:-docker.io/cryptape/llvm-n-rust:20240630}"
+# docker pull docker.io/cryptape/llvm-n-rust:20240630
+DOCKER_IMAGE="${DOCKER_IMAGE:-docker.io/cryptape/llvm-n-rust@sha256:bafaf76d4f342a69b8691c08e77a330b7740631f3d1d9c9bee4ead521b29ee55}"
 CHECKSUM_FILE_PATH="${CHECKSUM_FILE_PATH:-checksums.txt}"
 
 # We are parsing command line arguments based on tips from:
