From 77d6a2815cad900f6cc45e27d2f4e60face0aaa4 Mon Sep 17 00:00:00 2001 From: Razvan-Daniel Mihai <84674+razvan@users.noreply.github.com> Date: Thu, 18 Jun 2026 15:22:22 +0200 Subject: [PATCH 1/3] Bump UBI9/UBI10 hash versions. --- stackable-base/Dockerfile | 12 +++++------- stackable-devel/Dockerfile | 12 +++++------- testing-tools/Dockerfile | 9 +++++---- ubi10-rust-builder/Dockerfile | 12 +++++------- ubi9-rust-builder/Dockerfile | 11 +++++------ 5 files changed, 25 insertions(+), 31 deletions(-) diff --git a/stackable-base/Dockerfile b/stackable-base/Dockerfile index b24f41195..da9d42f96 100644 --- a/stackable-base/Dockerfile +++ b/stackable-base/Dockerfile @@ -35,13 +35,11 @@ cd /secret-operator cargo auditable --quiet build --release --package cert-tools && cargo cyclonedx --all --spec-version 1.5 --describe binaries EOF -# Find the latest version at https://catalog.redhat.com/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5?container-tabs=gti -# IMPORTANT: Make sure to use the "Manifest List Digest" that references the images for multiple architectures -# rather than just the "Image Digest" that references the image for the selected architecture. -# The website is broken, so you can use this to find it: -# curl https://catalog.redhat.com/en/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5 \ -# | grep -oE 'registry.redhat.io/ubi9/ubi-minimal@sha256:[a-z0-9]{64}' -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:c7d44146f826037f6873d99da479299b889473492d3c1ab8af86f08af04ec8a0 AS builder +# Find the latest version: +# +# docker buildx imagetools inspect registry.access.redhat.com/ubi9/ubi-minimal --format '{{json .Manifest.Digest}}' +# +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:1bc3c5c15720506a0cf48adfdf8b623dfe704377e007d7bbae8d14876392ca6a AS builder # intentionally unused ARG PRODUCT_VERSION diff --git a/stackable-devel/Dockerfile b/stackable-devel/Dockerfile index cdec8f426..12651e40e 100644 --- a/stackable-devel/Dockerfile +++ b/stackable-devel/Dockerfile @@ -8,13 +8,11 @@ # Use `stackable-base` as a base for the final image stage instead # -# Find the latest version at https://catalog.redhat.com/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5?container-tabs=gti -# IMPORTANT: Make sure to use the "Manifest List Digest" that references the images for multiple architectures -# rather than just the "Image Digest" that references the image for the selected architecture. -# The website is broken, so you can use this to find it: -# curl https://catalog.redhat.com/en/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5 \ -# | grep -oE 'registry.redhat.io/ubi9/ubi-minimal@sha256:[a-z0-9]{64}' -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:c7d44146f826037f6873d99da479299b889473492d3c1ab8af86f08af04ec8a0 AS builder +# Find the latest version: +# +# docker buildx imagetools inspect registry.access.redhat.com/ubi9/ubi-minimal --format '{{json .Manifest.Digest}}' +# +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:1bc3c5c15720506a0cf48adfdf8b623dfe704377e007d7bbae8d14876392ca6a AS builder # intentionally unused ARG PRODUCT_VERSION diff --git a/testing-tools/Dockerfile b/testing-tools/Dockerfile index 8ae38fae8..a86491102 100644 --- a/testing-tools/Dockerfile +++ b/testing-tools/Dockerfile @@ -4,10 +4,11 @@ ARG GRPCURL_VERSION FROM fullstorydev/grpcurl:v${GRPCURL_VERSION} AS grpcurl -# Find the latest version at https://catalog.redhat.com/en/software/containers/ubi10/ubi-minimal/66f1504a379b9c2cf23e145c#get-this-image -# IMPORTANT: Make sure to use the "Manifest List Digest" that references the images for multiple architectures -# rather than just the "Image Digest" that references the image for the selected architecture. -FROM registry.access.redhat.com/ubi10/ubi-minimal@sha256:67aafc6c9c44374e1baf340110d4c835457d59a0444c068ba9ac6431a6d9e7ac +# Find the latest version: +# +# docker buildx imagetools inspect registry.access.redhat.com/ubi10/ubi-minimal --format '{{json .Manifest.Digest}}' +# +FROM registry.access.redhat.com/ubi10/ubi-minimal@sha256:76c113359a458e3f04057762b5bd4a9837a6987520434dea158c728280116713 ARG PRODUCT_VERSION ARG PYTHON_VERSION diff --git a/ubi10-rust-builder/Dockerfile b/ubi10-rust-builder/Dockerfile index a6461fd10..973f631fa 100644 --- a/ubi10-rust-builder/Dockerfile +++ b/ubi10-rust-builder/Dockerfile @@ -1,13 +1,11 @@ # syntax=docker/dockerfile:1.16.0@sha256:e2dd261f92e4b763d789984f6eab84be66ab4f5f08052316d8eb8f173593acf7 # check=error=true -# Find the latest version at https://catalog.redhat.com/en/software/containers/ubi10/ubi-minimal/66f1504a379b9c2cf23e145c#get-the-image -# IMPORTANT: Make sure to use the "Manifest List Digest" that references the images for multiple architectures -# rather than just the "Image Digest" that references the image for the selected architecture. -# The website is broken, so you can use this to find it: -# curl https://catalog.redhat.com/en/software/containers/ubi10/ubi-minimal/66f1504a379b9c2cf23e145c \ -# | grep -oE 'registry.redhat.io/ubi10/ubi-minimal@sha256:[a-z0-9]{64}' -FROM registry.access.redhat.com/ubi10/ubi-minimal@sha256:a74a7a92d3069bfac09c6882087771fc7db59fa9d8e16f14f4e012fe7288554c AS builder +# Find the latest version: +# +# docker buildx imagetools inspect registry.access.redhat.com/ubi10/ubi-minimal --format '{{json .Manifest.Digest}}' +# +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:76c113359a458e3f04057762b5bd4a9837a6987520434dea158c728280116713 AS builder LABEL maintainer="Stackable GmbH" diff --git a/ubi9-rust-builder/Dockerfile b/ubi9-rust-builder/Dockerfile index 967a590ed..f72168792 100644 --- a/ubi9-rust-builder/Dockerfile +++ b/ubi9-rust-builder/Dockerfile @@ -1,12 +1,11 @@ # syntax=docker/dockerfile:1.16.0@sha256:e2dd261f92e4b763d789984f6eab84be66ab4f5f08052316d8eb8f173593acf7 # check=error=true -# Find the latest version at https://catalog.redhat.com/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5?container-tabs=gti -# IMPORTANT: Be sure to use the Manifest List Digest for multi-arch support -# The website is broken, so you can use this to find it: -# curl https://catalog.redhat.com/en/software/containers/ubi9/ubi-minimal/615bd9b4075b022acc111bf5 \ -# | grep -oE 'registry.redhat.io/ubi9/ubi-minimal@sha256:[a-z0-9]{64}' -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:c7d44146f826037f6873d99da479299b889473492d3c1ab8af86f08af04ec8a0 AS builder +# Find the latest version: +# +# docker buildx imagetools inspect registry.access.redhat.com/ubi9/ubi-minimal --format '{{json .Manifest.Digest}}' +# +FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:1bc3c5c15720506a0cf48adfdf8b623dfe704377e007d7bbae8d14876392ca6a AS builder LABEL maintainer="Stackable GmbH" From 2722988ec00b336cdd7a920b39dd5c17a8e89abe Mon Sep 17 00:00:00 2001 From: Razvan-Daniel Mihai <84674+razvan@users.noreply.github.com> Date: Thu, 18 Jun 2026 15:32:20 +0200 Subject: [PATCH 2/3] Bump cyclone and auditable versions --- stackable-devel/Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/stackable-devel/Dockerfile b/stackable-devel/Dockerfile index 12651e40e..f1f50a2b0 100644 --- a/stackable-devel/Dockerfile +++ b/stackable-devel/Dockerfile @@ -49,10 +49,10 @@ ARG RUST_DEFAULT_TOOLCHAIN_VERSION=1.93.0 ENV RUST_DEFAULT_TOOLCHAIN_VERSION=${RUST_DEFAULT_TOOLCHAIN_VERSION} # Find the latest version here: https://crates.io/crates/cargo-cyclonedx # renovate: datasource=crate packageName=cargo-cyclonedx -ENV CARGO_CYCLONEDX_CRATE_VERSION=0.5.7 +ENV CARGO_CYCLONEDX_CRATE_VERSION=0.5.9 # Find the latest version here: https://crates.io/crates/cargo-auditable # renovate: datasource=crate packageName=cargo-auditable -ENV CARGO_AUDITABLE_CRATE_VERSION=0.7.2 +ENV CARGO_AUDITABLE_CRATE_VERSION=0.7.4 RUN < Date: Thu, 18 Jun 2026 16:22:27 +0200 Subject: [PATCH 3/3] fix typo --- ubi10-rust-builder/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ubi10-rust-builder/Dockerfile b/ubi10-rust-builder/Dockerfile index 973f631fa..634dc0871 100644 --- a/ubi10-rust-builder/Dockerfile +++ b/ubi10-rust-builder/Dockerfile @@ -5,7 +5,7 @@ # # docker buildx imagetools inspect registry.access.redhat.com/ubi10/ubi-minimal --format '{{json .Manifest.Digest}}' # -FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:76c113359a458e3f04057762b5bd4a9837a6987520434dea158c728280116713 AS builder +FROM registry.access.redhat.com/ubi10/ubi-minimal@sha256:76c113359a458e3f04057762b5bd4a9837a6987520434dea158c728280116713 AS builder LABEL maintainer="Stackable GmbH"