commit 5f7a29d41cc6ab83345fbdec6befa62971970c20 parent c97fe9fc116a451582d73ddcba70c6eecef2c08c Author: Ryan Sepassi <rsepassi@gmail.com> Date: Mon, 20 Apr 2026 17:01:22 -0700 pin alpine image Diffstat:
| M | Makefile | | | 11 | ++++++++++- |
1 file changed, 10 insertions(+), 1 deletion(-)
diff --git a/Makefile b/Makefile @@ -33,7 +33,16 @@ ifeq ($(PLATFORM),) endif UPSTREAM := $(abspath $(CURDIR)/../live-bootstrap) -RUNTIME_IMAGE := public.ecr.aws/docker/library/alpine:latest + +# Pinned to a manifest-list digest (not the :latest tag): podman on macOS +# only stores one image per tag locally, so cross-arch pulls under :latest +# keep overwriting each other's tag and re-pulling every run-all. A digest- +# pinned reference is immutable and lets --platform resolve the right +# per-arch variant from the same stored index, so each platform's image +# survives across invocations. Bump the digest when you want a newer base. +# +# Current pin: alpine 3.23.4 (index fetched 2026-04-20 from public.ecr.aws). +RUNTIME_IMAGE := public.ecr.aws/docker/library/alpine@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11 OUT_DIR := build/$(ARCH) TOOLS_DIR := $(OUT_DIR)/tools