From e7496562b3de6567275a7539f591c59fcc025277 Mon Sep 17 00:00:00 2001 From: Nguyen Minh Phuc Date: Tue, 21 Jul 2026 15:50:12 +0000 Subject: [PATCH] ci: pull the BuildKit frontend from the mirror too MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Run #70's logs still showed one Docker Hub reference, from the one place that does not look like an image reference: #2 resolve image config for docker-image://docker.io/docker/dockerfile:1.10 `# syntax=` is an image pull. Same mirror, same digest, and pinned now — it was the only unpinned image left in the build. --- services/reconciler/Dockerfile | 2 +- services/worker/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/services/reconciler/Dockerfile b/services/reconciler/Dockerfile index d98da07..d7899a3 100644 --- a/services/reconciler/Dockerfile +++ b/services/reconciler/Dockerfile @@ -1,4 +1,4 @@ -# syntax=docker/dockerfile:1.10 +# syntax=mirror.gcr.io/docker/dockerfile:1.10@sha256:865e5dd094beca432e8c0a1d5e1c465db5f998dca4e439981029b3b81fb39ed5 # # svcforge reconciler. Build from the REPO ROOT: # docker buildx build -f services/reconciler/Dockerfile -t svcforge/reconciler:dev . diff --git a/services/worker/Dockerfile b/services/worker/Dockerfile index 6764941..b4a688e 100644 --- a/services/worker/Dockerfile +++ b/services/worker/Dockerfile @@ -1,4 +1,4 @@ -# syntax=docker/dockerfile:1.10 +# syntax=mirror.gcr.io/docker/dockerfile:1.10@sha256:865e5dd094beca432e8c0a1d5e1c465db5f998dca4e439981029b3b81fb39ed5 # # svcforge worker. Build from the REPO ROOT: # docker buildx build -f services/worker/Dockerfile -t svcforge/worker:dev .