jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: jwright/bztmon-site:c5d9da90927a1d2c4b161c788cc42a5c22d004ca
Branches Tags
jwright/bztmon-site:main jwright/bztmon-site:feat/batcomputer-facelift
...
compare: jwright/bztmon-site:d64f528ff741324c4ccd3a844bb47761c3b39296
Branches Tags
jwright/bztmon-site:main jwright/bztmon-site:feat/batcomputer-facelift

2 Commits
c5d9da9092 ... d64f528ff7

Author SHA1 Message Date
jwright d64f528ff7 Merge pull request 'docker: digest-pin the node:22-bookworm-slim build base' (#2) from mirror/node-digest-pin into main
build-and-deploy / build (push) Failing after 12m42s
Details 
Reviewed-on: #2
 2026-06-23 11:01:59 +00:00
jwright dc42d31595 docker: digest-pin the node:22-bookworm-slim build base 
Pin the floating node:22-bookworm-slim tag to its index digest. The re-resolve
of this unpinned docker.io tag every build was the recurring CI 'hang'. Paired
with the bastion runner now pulling through the zot mirror, the base is fetched
once and cached. (nginx runtime stage was already digest-pinned.)
 2026-06-23 20:47:02 +10:00
1 changed files with 4 additions and 1 deletions
Expand all files Collapse all files
Dockerfile
+4 -1
View File
@@ -3,7 +3,10 @@
# pinned nginx-unprivileged runtime serving the static dist/. # pinned nginx-unprivileged runtime serving the static dist/.
# ---- build stage ---------------------------------------------------------- # ---- build stage ----------------------------------------------------------
FROM node:22-bookworm-slim AS build # Digest-pinned (was a floating tag → the docker.io re-resolve was the CI "build hang"). With the bastion
# runner pointed at the zot pull-through mirror, this exact layer is fetched once and cached. Bump the digest
# when intentionally moving Node. node:22-bookworm-slim index digest resolved 2026-06-23.
FROM node:22-bookworm-slim@sha256:d9f850096136edbc402debdd8729579a288aac64574ada0ff4db26b6ae58b0b2 AS build
WORKDIR /app WORKDIR /app
# Install deps from the lockfile only first (better layer caching). # Install deps from the lockfile only first (better layer caching).