max / alloy

Move the base image pins to what the tags resolve to today Both were stale and one was gone: quay.io no longer serves the pinned fedora-bootc:43 manifest at all, so every build since it was pinned three days ago died at the second FROM with "manifest unknown". fedora:43's old digest still pulls; it moves too, since leaving one behind buys nothing. Worth recording what this demonstrates, because it is the same question blocking 1372b159 item 3 one layer up: a digest pin with no archived copy expires on the registry's schedule, not ours. Rebuild-any-past-image is already unkeepable for the base, and no Fedora compose snapshot fixes that — it would need a local copy of the base index.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

Author: Max Johnson <me@maxj.phd> · 2026-08-03 23:10 UTC

Signed with PGP, not checked

Commit: 8af8084914d59d29bfec4de6fa7ca3ca52f6780f

Parent: 13d4628

1 file changed, +2 insertions, -2 deletions

M Containerfile +2 -2

			@@ -42,7 +42,7 @@
42	42		#
43	43		# To move it: build/refresh-base-digests.sh, which resolves the tags and
44	44		# rewrites these two lines. Do that deliberately, not as drive-by maintenance.
45		-	FROM quay.io/fedora/fedora:43@sha256:44ce208e9a7ea0da1027caecd4e846664ae5e2a2d73d1e93a969f529b9015c15 AS rust-build
	45	+	FROM quay.io/fedora/fedora:43@sha256:f9e3105e1f074aea1974192abb528432626f1e40ed50d2a9985460047f411aa7 AS rust-build
46	46
47	47		# No python3 any more. It was here for tools/vtrgb.py, which rendered the
48	48		# greeter's console palette; skelgen emits that table now, along with the rest
			@@ -291,7 +291,7 @@
291	291		# Digest-pinned for the same reason as the build stage above, and it matters
292	292		# more here: this one is the operating system. See that comment for why the
293	293		# tag is kept beside the digest and why it is the multi-arch index.
294		-	FROM quay.io/fedora/fedora-bootc:43@sha256:9f0fcfc553103b98ccc01ca02fbb43bbb38649749e613fc007399681c281ae2f
	294	+	FROM quay.io/fedora/fedora-bootc:43@sha256:0bbcb9f07b06cd680b8a75ff2a2d91cfee8de7781fe4b1c76928503aa0526472
295	295
296	296		# =====================================================================
297	297		# The profile: client or server.