JensWH/netz39-infra-ansible
1
0
Fork 0
forked from Netz39_Admin/netz39-infra-ansible
Code Pull requests Activity

🚑 Pin Dokuwiki container to specific digest

Browse source 
There seem to be compatibility issues with container updates within the
same tag. These updates happen every time we run Ansible and are usually
desired, as they can fix security issues (esp. in the base image).

However, if the update cannot be trusted to run without manual intervention,
we have to pin the version and check for updates manually.
This commit is contained in:
Stefan Haun 2022-11-18 17:12:13 +01:00
parent ed7106dfcc
commit 8855f7cc10
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
host-tau.yml
View file

@ -12,7 +12,9 @@
dokuwiki_domain: "wiki.netz39.de" dokuwiki_domain: "wiki.netz39.de"
dokuwiki_port: 9005 dokuwiki_port: 9005
dokuwiki_image: "bitnami/dokuwiki:20220731" # This container is pinned, because there are issues
# with backwards compatibility within the same tag!
dokuwiki_image: "bitnami/dokuwiki:20220731@sha256:989ab52cf2d2e0f84166e114ca4ce88f59546b8f6d34958905f8d81c18cbd759"
roles: roles:
- role: docker_setup - role: docker_setup