diff --git a/build/Dockerfile b/build/Dockerfile index e3a0f6e00..8c2f64b75 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -10,11 +10,11 @@ ARG PACKAGE_REPO=pkgs.nginx.com ############################################# Base images containing libs for FIPS ############################################# -FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi8@sha256:ea2f5d57c65b1682418708b6f6c234ba4ace4e48ecceeda97e7bb3a560601efb AS ubi8-packages -FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:7dc715d51c9664d892376fada482f29a95023dc81657f89fa4cf7a62fd98d837 AS ubi9-packages +FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi8@sha256:12b2f675a94fed04ab5787d78a27b4f8723991bdbe1403257e71de368e7ec852 AS ubi8-packages +FROM ghcr.io/nginx/dependencies/nginx-ubi:ubi9@sha256:c9c269ae1ae6a4608fe4e6536073cdea9445433de652fd8ac667992a1ed198d6 AS ubi9-packages FROM ghcr.io/nginx/alpine-fips:0.3.0-alpine3.19@sha256:449f1a149e81e36bb929ebd362433a06a158ff2a7e3ba05b4b8d9ea96d59ae91 AS alpine-fips-3.19 FROM ghcr.io/nginx/alpine-fips:0.3.0-alpine3.21@sha256:5e5033f34ae7147ce8df928fa58c485bc08ded8ace22428b4c16df30e3b39901 AS alpine-fips-3.21 -FROM redhat/ubi9-minimal:9.6@sha256:67fee1a132e8e326434214b3c7ce90b2500b2ad02c9790cc61581feb58d281d5 AS ubi-minimal +FROM redhat/ubi9-minimal:9.6@sha256:0d7cfb0704f6d389942150a01a20cb182dc8ca872004ebf19010e2b622818926 AS ubi-minimal FROM golang:1.24-alpine@sha256:daae04ebad0c21149979cd8e9db38f565ecefd8547cf4a591240dc1972cf1399 AS golang-builder ############################################# NGINX files ############################################# @@ -469,7 +469,7 @@ RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode ############################################# Base image for UBI8 with NGINX Plus and App Protect WAF ############################################# -FROM redhat/ubi8@sha256:a910ffa70b1481121db5051432dea04aab0ba7150ffe4870c5b55e15427ea6c1 AS ubi-8-plus-nap +FROM redhat/ubi8@sha256:a463a8eb2e360f83a7f6baf32c53f7a07c13ff012658a203a7f5331fe93a4924 AS ubi-8-plus-nap ARG NGINX_PLUS_VERSION ARG BUILD_OS @@ -508,7 +508,7 @@ RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode ############################################# Base image for UBI8 with NGINX Plus and App Protect WAFv5 ############################################# -FROM redhat/ubi8@sha256:a910ffa70b1481121db5051432dea04aab0ba7150ffe4870c5b55e15427ea6c1 AS ubi-8-plus-nap-v5 +FROM redhat/ubi8@sha256:a463a8eb2e360f83a7f6baf32c53f7a07c13ff012658a203a7f5331fe93a4924 AS ubi-8-plus-nap-v5 ARG NGINX_PLUS_VERSION ENV NGINX_VERSION=${NGINX_PLUS_VERSION} diff --git a/build/dependencies/Dockerfile.ubi8 b/build/dependencies/Dockerfile.ubi8 index 5e5c46f3e..a1996f500 100644 --- a/build/dependencies/Dockerfile.ubi8 +++ b/build/dependencies/Dockerfile.ubi8 @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1.16 -FROM redhat/ubi8@sha256:a910ffa70b1481121db5051432dea04aab0ba7150ffe4870c5b55e15427ea6c1 AS rpm-build +FROM redhat/ubi8@sha256:a463a8eb2e360f83a7f6baf32c53f7a07c13ff012658a203a7f5331fe93a4924 AS rpm-build RUN mkdir -p /rpms/ \ && dnf install rpm-build gcc make cmake -y \ && rpmbuild --rebuild --nodebuginfo https://mirror.stream.centos.org/9-stream/BaseOS/source/tree/Packages/c-ares-1.19.1-1.el9.src.rpm \ diff --git a/build/dependencies/Dockerfile.ubi9 b/build/dependencies/Dockerfile.ubi9 index 3d33717ad..3807dd1f1 100644 --- a/build/dependencies/Dockerfile.ubi9 +++ b/build/dependencies/Dockerfile.ubi9 @@ -1,5 +1,5 @@ # syntax=docker/dockerfile:1.16 -FROM redhat/ubi9:9.6@sha256:e2ec76831504fcb2e3af8f243fba7a08398e343ee27296adcc8c80f82818b22d AS rpm-build +FROM redhat/ubi9:9.6@sha256:0fa3e48369775f03b640a28cd5b55e6410569fa149f1827240619169463a7833 AS rpm-build RUN mkdir -p /rpms/ \ && dnf install rpm-build gcc make cmake -y \ && rpmbuild --rebuild --nodebuginfo https://mirror.stream.centos.org/9-stream/BaseOS/source/tree/Packages/c-ares-1.19.1-1.el9.src.rpm \