|
|
|
@ -27,17 +27,17 @@
|
|
|
|
|
# https://docs.docker.com/develop/develop-images/multistage-build/
|
|
|
|
|
# https://whitfin.io/speeding-up-rust-docker-builds/
|
|
|
|
|
####################### VAULT BUILD IMAGE #######################
|
|
|
|
|
{% set vault_image_hash = "sha256:feb3f46d15738191b9043be4cdb1be2c0078ed411e7b7be73a2f4fcbca01e13c" %}
|
|
|
|
|
{% set vault_image_hash = "sha256:61db9fab4dfc8259177fbcd25d239b88202c11f039a94c341ed0f828a9a23c9c" %}
|
|
|
|
|
{% raw %}
|
|
|
|
|
# This hash is extracted from the docker web-vault builds and it's prefered over a simple tag because it's immutable.
|
|
|
|
|
# It can be viewed in multiple ways:
|
|
|
|
|
# - From the https://hub.docker.com/repository/docker/bitwardenrs/web-vault/tags page, click the tag name and the digest should be there.
|
|
|
|
|
# - From the console, with the following commands:
|
|
|
|
|
# docker pull bitwardenrs/web-vault:v2.12.0e
|
|
|
|
|
# docker image inspect --format "{{.RepoDigests}}" bitwardenrs/web-vault:v2.12.0e
|
|
|
|
|
# docker pull bitwardenrs/web-vault:v2.13.2
|
|
|
|
|
# docker image inspect --format "{{.RepoDigests}}" bitwardenrs/web-vault:v2.13.2
|
|
|
|
|
#
|
|
|
|
|
# - To do the opposite, and get the tag from the hash, you can do:
|
|
|
|
|
# docker image inspect --format "{{.RepoTags}}" bitwardenrs/web-vault@sha256:feb3f46d15738191b9043be4cdb1be2c0078ed411e7b7be73a2f4fcbca01e13c
|
|
|
|
|
# docker image inspect --format "{{.RepoTags}}" bitwardenrs/web-vault@sha256:61db9fab4dfc8259177fbcd25d239b88202c11f039a94c341ed0f828a9a23c9c
|
|
|
|
|
{% endraw %}
|
|
|
|
|
FROM bitwardenrs/web-vault@{{ vault_image_hash }} as vault
|
|
|
|
|
|
|
|
|
|