From 688ff1aa884b9808f6f0c7e670a172c0629311e5 Mon Sep 17 00:00:00 2001 From: Audiobuzz Date: Sun, 5 Jul 2026 01:47:28 +0000 Subject: [PATCH] fleet-manager: mirror the distroless runtime base through Harbor Route the gcr.io distroless runtime image through the Harbor mirror (harbor.bitasylum.org/gcr.io/distroless/static-debian12:nonroot) per the standing rule, completing the fleet-manager Dockerfile's base-image mirroring. --- serving/fleet-manager/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/serving/fleet-manager/Dockerfile b/serving/fleet-manager/Dockerfile index 8f6cecb..b49f672 100644 --- a/serving/fleet-manager/Dockerfile +++ b/serving/fleet-manager/Dockerfile @@ -36,7 +36,7 @@ RUN mkdir -p /data-seed && touch /data-seed/.keep # default (uid 65532). The data dir (inventory + admin store + enrol key) is a # mounted, writable volume — pre-created here owned by nonroot so a fresh volume # inherits that ownership. -FROM gcr.io/distroless/static-debian12:nonroot +FROM harbor.bitasylum.org/gcr.io/distroless/static-debian12:nonroot COPY --from=build /fleet-manager /usr/local/bin/fleet-manager COPY --from=build --chown=65532:65532 /data-seed /data USER nonroot:nonroot