Skip to content

fix(docker): pin backend runtime base images #8

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Canvinus merged 1 commit into from
Jul 9, 2026
Merged

fix(docker): pin backend runtime base images #8

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions nest/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Build stage
FROM node:24-alpine AS build
FROM node@sha256:2bdb65ed1dab192432bc31c95f94155ca5ad7fc1392fb7eb7526ab682fa5bf14 AS build

WORKDIR /app

Expand All @@ -20,7 +20,7 @@ COPY src/ src/
RUN npm run build

# Runtime (production) layer
FROM docker:dind AS production
FROM docker@sha256:7d85d0eda291f1a7ab6df4a9d1802b5ad4cf9145a088bd11188c78dcb5c7392b AS production

@chatgpt-codex-connector chatgpt-codex-connector Bot Jul 9, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Pin the Rust and near-cli installs too

In the production rebuild scenario this change is meant to make reproducible, starting from a digest here still does not freeze the toolchain installed later: the Dockerfile continues to run rustup with --default-toolchain stable and cargo install near-cli-rs without a --version, so a rebuild will still pick up current Rust and near-cli-rs even though the base image is pinned. Please pin those versions as well if the outage fix needs to stay isolated to the startup command.

Useful? React with 👍 / 👎.


# Install dependencies for Rust, build tools, and HIDAPI
RUN apk add --no-cache \
Expand Down
Loading