test: pin images to manifest digest

Signed-off-by: CrazyMax <[email protected]>
tonistiigi · Dec 4, 2024 · fa1a3a3 · fa1a3a3
1 parent 91b7087
commit fa1a3a3
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 15 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -116,10 +116,10 @@ jobs:
         run: |
           docker run --rm --privileged tonistiigi/binfmt:test --uninstall qemu-*
           docker run --rm --privileged tonistiigi/binfmt:test --install all
-          docker run --rm arm64v8/alpine uname -a
-          docker run --rm arm32v7/alpine uname -a
-          docker run --rm ppc64le/alpine uname -a
-          docker run --rm s390x/alpine uname -a
+          docker run --rm arm64v8/alpine:latest@sha256:ea3c5a9671f7b3f7eb47eab06f73bc6591df978b0d5955689a9e6f943aa368c0 uname -a
+          docker run --rm arm32v7/alpine:latest@sha256:4fdafe217d0922f3c3e2b4f64cf043f8403a4636685cd9c51fea2cbd1f419740 uname -a
+          docker run --rm ppc64le/alpine:latest@sha256:0880443bffa028dfbbc4094a32dd6b7ac25684e4c0a3d50da9e0acae355c5eaf uname -a
+          docker run --rm s390x/alpine:latest@sha256:b815fadf80495594eb6296a6af0bc647ae5f193e0044e07acec7e5b378c9ce2d uname -a
           docker run --rm tonistiigi/debian:riscv uname -a
           docker run --rm yangzewei2023/debian:loongarch64 uname -a
           docker run --rm --platform=linux/s390x s390x/ubuntu apt update

diff --git a/README.md b/README.md
@@ -111,10 +111,10 @@ binfmt/9a44d27 qemu/v6.0.0 go/1.15.11
 ## Test current emulation support
 
 ```
-docker run --rm arm64v8/alpine uname -a
-docker run --rm arm32v7/alpine uname -a
-docker run --rm ppc64le/alpine uname -a
-docker run --rm s390x/alpine uname -a
+docker run --rm arm64v8/alpine:latest@sha256:ea3c5a9671f7b3f7eb47eab06f73bc6591df978b0d5955689a9e6f943aa368c0 uname -a
+docker run --rm arm32v7/alpine:latest@sha256:4fdafe217d0922f3c3e2b4f64cf043f8403a4636685cd9c51fea2cbd1f419740 uname -a
+docker run --rm ppc64le/alpine:latest@sha256:0880443bffa028dfbbc4094a32dd6b7ac25684e4c0a3d50da9e0acae355c5eaf uname -a
+docker run --rm s390x/alpine:latest@sha256:b815fadf80495594eb6296a6af0bc647ae5f193e0044e07acec7e5b378c9ce2d uname -a
 docker run --rm tonistiigi/debian:riscv uname -a
 ```
 

diff --git a/hack/install-and-test b/hack/install-and-test
@@ -20,11 +20,11 @@ echo $status | jq .supported | grep linux/386
 echo $status | jq .emulators | grep qemu-riscv64
 echo $status | jq .emulators | grep qemu-arm
 
-docker run --rm arm64v8/alpine uname -a
-docker run --rm arm32v7/alpine uname -a
-docker run --rm ppc64le/alpine uname -a
-docker run --rm s390x/alpine uname -a
-docker run --rm i386/alpine uname -a
+docker run --rm arm64v8/alpine:latest@sha256:ea3c5a9671f7b3f7eb47eab06f73bc6591df978b0d5955689a9e6f943aa368c0 uname -a
+docker run --rm arm32v7/alpine:latest@sha256:4fdafe217d0922f3c3e2b4f64cf043f8403a4636685cd9c51fea2cbd1f419740 uname -a
+docker run --rm ppc64le/alpine:latest@sha256:0880443bffa028dfbbc4094a32dd6b7ac25684e4c0a3d50da9e0acae355c5eaf uname -a
+docker run --rm s390x/alpine:latest@sha256:b815fadf80495594eb6296a6af0bc647ae5f193e0044e07acec7e5b378c9ce2d uname -a
+docker run --rm i386/alpine:latest@sha256:dea9f02e103e837849f984d5679305c758aba7fea1b95b7766218597f61a05ab uname -a
 docker run --rm tonistiigi/debian:riscv uname -a
 
 if [ "$(uname -m)" != "x86_64" ]; then exit 0; fi
@@ -41,9 +41,9 @@ echo $status | jq .emulators | grep qemu-ppc64le
 if echo $status | jq .emulators | grep aarch64; then exit 1; fi
 if echo $status | jq .emulators | grep riscv64; then exit 1; fi
 
-if docker run --rm arm64v8/alpine uname -a 2>/dev/null; then exit 1; fi
+if docker run --rm arm64v8/alpine:latest@sha256:ea3c5a9671f7b3f7eb47eab06f73bc6591df978b0d5955689a9e6f943aa368c0 uname -a 2>/dev/null; then exit 1; fi
 
 docker run --rm --privileged tonistiigi/binfmt:${TAG:-test} --install arm64
-docker run --rm arm64v8/alpine uname -a
+docker run --rm arm64v8/alpine:latest@sha256:ea3c5a9671f7b3f7eb47eab06f73bc6591df978b0d5955689a9e6f943aa368c0 uname -a
 
 docker run --rm --privileged tonistiigi/binfmt:${TAG:-test} --install riscv64