Merge branch 'trixie-image' into 'main'

chore(docker): use image digests in Dockerfile

See merge request flarenetwork/ftso/fast-updates!37

Author: LukaAvbreht

.gitlab-ci.yml

@@ -4,6 +4,9 @@ workflow:
       when: never
     - when: always
 
+variables:
+  GOLANG_VERSION: "1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9"
+
 # lint-ts-simulation:
 #   image: node:18
 #   before_script:
@@ -31,7 +34,7 @@ lint-py-visualizer:
     - poetry run ruff check --fix
 
 lint-go-client:
-  image: golang:1.21.0
+  image: golang:${GOLANG_VERSION}
   before_script:
     - curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(go env GOPATH)/bin v1.57.2
     - cd go-client
@@ -43,7 +46,7 @@ lint-go-client:
     - golangci-lint run
 
 test-go-client:
-  image: golang:1.21.0
+  image: golang:${GOLANG_VERSION}
   before_script:
     - cd go-client
   script:
@@ -58,6 +61,7 @@ test-go-client-docker:
     DOCKER_HOST: tcp://docker:2375
     DOCKER_TLS_CERTDIR: ""
     DOCKER_DRIVER: overlay2
+    GOLANG_IMAGE: "golang:${GOLANG_VERSION}"
   before_script:
     - cd go-client/tests
   script:

go-client/Dockerfile

@@ -1,5 +1,5 @@
 # build executable
-FROM golang:1.21 AS builder
+FROM golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9 AS builder
 
 WORKDIR /build
 
@@ -14,7 +14,7 @@ COPY . ./
 RUN go build -o /app/client ./main.go
 RUN go build -o /app/keygen ./keygen/keygen.go
 
-FROM debian:latest AS execution
+FROM debian:trixie@sha256:72547dd722cd005a8c2aa2079af9ca0ee93aad8e589689135feaed60b0a8c08d AS execution
 
 WORKDIR /app
 

go-client/tests/docker-compose.yaml

@@ -9,23 +9,23 @@ services:
 
   deploy:
     container_name: deploy
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"
     command: /bin/bash -c 'go run tests/test.go --config tests/configs/config_deploy.toml deploy'
-  
+
   mock_register:
     container_name: mock_register
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"
     command: /bin/bash -c 'go run tests/test.go --config tests/configs/config1.toml register 2 && go run tests/test.go --config tests/configs/config2.toml register 2 && go run tests/test.go --config tests/configs/config3.toml register 2'
-  
+
   client1:
     container_name: client1
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"
@@ -35,7 +35,7 @@ services:
 
   client2:
     container_name: client2
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"
@@ -45,7 +45,7 @@ services:
 
   client3:
     container_name: client3
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"
@@ -55,7 +55,7 @@ services:
 
   test-client:
     container_name: test-client
-    image: golang:1.21.0-bullseye
+    image: ${GOLANG_IMAGE:-golang:1.21-bookworm@sha256:c6a5b9308b3f3095e8fde83c8bf4d68bd101fce606c1a0a1394522542509dda9}
     volumes:
       - "../:/client"
     working_dir: "/client"