jwright/bztmon-site
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docker: digest-pin the node:22-bookworm-slim build base #2

Merged
jwright merged 1 commits from mirror/node-digest-pin into main 2026-06-23 11:01:59 +00:00
Conversation 0 Commits 1 Files Changed 1
+4 -1
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile
+4 -1
View File
@@ -3,7 +3,10 @@
# pinned nginx-unprivileged runtime serving the static dist/. # pinned nginx-unprivileged runtime serving the static dist/.
# ---- build stage ---------------------------------------------------------- # ---- build stage ----------------------------------------------------------
FROM node:22-bookworm-slim AS build # Digest-pinned (was a floating tag → the docker.io re-resolve was the CI "build hang"). With the bastion
# runner pointed at the zot pull-through mirror, this exact layer is fetched once and cached. Bump the digest
# when intentionally moving Node. node:22-bookworm-slim index digest resolved 2026-06-23.
FROM node:22-bookworm-slim@sha256:d9f850096136edbc402debdd8729579a288aac64574ada0ff4db26b6ae58b0b2 AS build
WORKDIR /app WORKDIR /app
# Install deps from the lockfile only first (better layer caching). # Install deps from the lockfile only first (better layer caching).