Skip to content
This repository was archived by the owner on Jun 30, 2021. It is now read-only.

Commit 5566616

Browse files
committed
v2.46.0-04: Update image id and digest.
1 parent 45cfd91 commit 5566616

File tree

3 files changed

+14
-13
lines changed

3 files changed

+14
-13
lines changed

CHANGELOG.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,8 +25,8 @@ Note image ids also change after scm-source.json has being updated which trigger
2525
+ Built with: Docker version 1.7.1, build 786b29d
2626
+ FROM ubuntu:wily-20150708
2727
+ Python: 2.7.10
28-
+ Digest: sha256:TBD
29-
+ Image ID: TBD
28+
+ Digest: sha256:6f525fa015e3b815da968a998c58757892955f195cee286b4c39fe15035d01d3
29+
+ Image ID: e7ceeaf7ab0adf758a1f2f5e21fe53db9aa2eff7b55b01af1c7fe2620a9f309b
3030

3131
## v2.46.0-02 (2015-07-17)
3232
+ Add DISABLE_ROLLBACK so when true users can troubleshoot. (Leo Gallucci)

README.md

Lines changed: 11 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -133,25 +133,26 @@ cat scm-source.json #=> { "url": "https://github.com/elgalu/docker-selenium",
133133

134134
There are also additional steps you can take to ensure you're using the correct image:
135135

136-
### Option 1 - Use immutable image digests
137-
Given docker.io currently allows to push the same tag image twice this represent a security concern but since docker >= 1.6.2 is possible to fetch the digest sha256 instead of the tag so you can be sure you're using the exact same docker image every time:
138-
139-
# e.g. sha256 for tag v2.46.0-04
140-
export SHA=TBD
141-
docker pull elgalu/selenium@sha256:${SHA}
142-
143-
### Option 2 - Check the Full Image Id
136+
### Option 1 - Check the Full Image Id
144137

145-
Verify that image id is indeed correct
138+
You can simply verify that image id is indeed the correct one.
146139

147140
# e.g. full image id for tag v2.46.0-04
148-
export IMGID=TBD
141+
export IMGID=e7ceeaf7ab0adf758a1f2f5e21fe53db9aa2eff7b55b01af1c7fe2620a9f309b
149142
if docker inspect -f='{{.Id}}' elgalu/selenium:v2.46.0-04 |grep ${IMGID} &> /dev/null; then
150143
echo "Image ID tested ok"
151144
else
152145
echo "Image ID doesn't match"
153146
fi
154147

148+
### Option 2 - Use immutable image digests
149+
150+
Given docker.io currently allows to push the same tag image twice this represent a security concern but since docker >= 1.6.2 is possible to fetch the digest sha256 instead of the tag so you can be sure you're using the exact same docker image every time:
151+
152+
# e.g. sha256 for tag v2.46.0-04
153+
export SHA=6f525fa015e3b815da968a998c58757892955f195cee286b4c39fe15035d01d3
154+
docker pull elgalu/selenium@sha256:${SHA}
155+
155156
You can find all digests sha256 and image ids per tag in the [CHANGELOG](./CHANGELOG.md) so as of now you just need to trust the sha256 in the CHANGELOG. Bullet proof is to fork this project and build the images yourself if security is a big concern.
156157

157158
### Using Xephyr to redirect X to the docker host

scm-source.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"url": "https://github.com/elgalu/docker-selenium",
3-
"revision": "5ea69b370ccb8f5d64f9a59526261600ac8ab68c",
3+
"revision": "45cfd9122cfaad8cc9ec7099842a7d0e13aa2409",
44
"author": "lgallucci",
55
"status": ""
66
}

0 commit comments

Comments
 (0)