dockpin
dockpin copied to clipboard
Jille
A tool for pinning Docker image and apt package versions
If you alias an image like `FROM ... AS img` and later use it with `FROM img`, we need to recognize that as an alias and not try to resolve...
It'd be neat to make it pin a digest in docker-compose files so they can be used to deliver a specific version, and re-pin them if you want upgrades.
hi @Jille ! I forgot to update the documentation in my previous pull request. Feel free to edit! :)
In Dockerfiles you can also use `COPY --from=$image` to copy files from another image. We should pin those too.
We now support apt, but we should also add apk support (Alpine Linux) because it's heavily used with Docker.
Dockpin makes it easy to update your pinned versions, but automatic is even better than easy. Maybe we should talk to the dependabot folks and see if they can run...
The Debian/Ubuntu mirrors don't keep old package versions forever. (Not that long even.) We should make it easy for our users to store the .deb files they need somewhere, so...