Skip to content

Files

Failed to load latest commit information.

Latest commit

 Cannot retrieve latest commit at this time.

History

History

docker-lock

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 
 
 

README.md

Demo of docker-lock

docker-lock is a tool to help manage Docker image digests.

Key features:

  • Add missing digests to Dockerfiles, docker-compose files, and K8S manifests
  • Update existing digests

Demo

make clean
make setup

Example 1: Adding digests

cd var/demo/000-nodigest

# generate a docker-lock.json file with digests
docker-lock lock generate
# rewrite Docker image references to include digests
docker-lock lock rewrite

# Docker image references in Dockerfile now has digests
diff --color --new-file -u -r ../../../share/states/000-nodigest/ ./

cd ../../../

Example 2: Updating outdated digests

cd var/demo/010-olddigest

# generate and rewrite makes no change
docker-lock lock generate
docker-lock lock rewrite
diff --color -u -r ../../../share/states/010-olddigest/ ./

# generate with --update-existing-digests queries registries for new digests
docker-lock lock generate --update-existing-digests
# rewrite Docker image references to include new digests
docker-lock lock rewrite

# Docker image references in Dockerfile are now updated
diff --color --new-file -u -r ../../../share/states/010-olddigest/ ./

cd ../../../