🚑 Pin Dokuwiki container to specific digest

There seem to be compatibility issues with container updates within the
same tag. These updates happen every time we run Ansible and are usually
desired, as they can fix security issues (esp. in the base image).

However, if the update cannot be trusted to run without manual intervention,
we have to pin the version and check for updates manually.
This commit is contained in:
Stefan Haun 2022-11-18 17:12:13 +01:00
parent ed7106dfcc
commit 8855f7cc10

View file

@ -12,7 +12,9 @@
dokuwiki_domain: "wiki.netz39.de"
dokuwiki_port: 9005
dokuwiki_image: "bitnami/dokuwiki:20220731"
# This container is pinned, because there are issues
# with backwards compatibility within the same tag!
dokuwiki_image: "bitnami/dokuwiki:20220731@sha256:989ab52cf2d2e0f84166e114ca4ce88f59546b8f6d34958905f8d81c18cbd759"
roles:
- role: docker_setup