fleet-manager: mirror the distroless runtime base through Harbor

Route the gcr.io distroless runtime image through the Harbor mirror
(harbor.bitasylum.org/gcr.io/distroless/static-debian12:nonroot) per the standing
rule, completing the fleet-manager Dockerfile's base-image mirroring.
This commit is contained in:
Audiobuzz
2026-07-05 01:47:28 +00:00
parent e6b1f0308e
commit 688ff1aa88
+1 -1
View File
@@ -36,7 +36,7 @@ RUN mkdir -p /data-seed && touch /data-seed/.keep
# default (uid 65532). The data dir (inventory + admin store + enrol key) is a
# mounted, writable volume — pre-created here owned by nonroot so a fresh volume
# inherits that ownership.
FROM gcr.io/distroless/static-debian12:nonroot
FROM harbor.bitasylum.org/gcr.io/distroless/static-debian12:nonroot
COPY --from=build /fleet-manager /usr/local/bin/fleet-manager
COPY --from=build --chown=65532:65532 /data-seed /data
USER nonroot:nonroot