From c150dd6eba673ae11cbb78e3b257147d89ce6ab7 Mon Sep 17 00:00:00 2001
From: Audiobuzz <audiobuzz@gmail.com>
Date: Fri, 19 Jun 2026 04:00:47 +0000
Subject: [PATCH] Point images at harbor

---
 diskless.pkr.hcl                   | 4 ++--
 serving/audit-collector/Dockerfile | 2 +-
 serving/chrony/Dockerfile          | 2 +-
 serving/dnsmasq/Dockerfile         | 2 +-
 serving/docker-compose.yml         | 2 +-
 serving/kiosk-app/Dockerfile       | 4 ++--
 serving/spdk/Dockerfile            | 2 +-
 7 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/diskless.pkr.hcl b/diskless.pkr.hcl
index ac8cde7..4a69e5a 100644
--- a/diskless.pkr.hcl
+++ b/diskless.pkr.hcl
@@ -172,8 +172,8 @@ source "qemu" "diskless" {
   disk_size        = "12G"
   format           = "qcow2"
   accelerator      = "kvm"
-  memory           = 4096
-  cpus             = 2
+  memory           = 8192
+  cpus             = 4
   headless         = true
   vnc_bind_address  = "0.0.0.0"
   qemuargs          = [["-cpu", "host"],
diff --git a/serving/audit-collector/Dockerfile b/serving/audit-collector/Dockerfile
index a255c69..a627dd2 100644
--- a/serving/audit-collector/Dockerfile
+++ b/serving/audit-collector/Dockerfile
@@ -4,7 +4,7 @@
 # fleet serving stack. Booted hosts forward auditd + syslog here; records land
 # under /var/log/remote/<sender-ip>/. See rsyslog.conf + README.md.
 
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 
 RUN apk add --no-cache rsyslog tzdata \
     && mkdir -p /var/log/remote /var/spool/rsyslog
diff --git a/serving/chrony/Dockerfile b/serving/chrony/Dockerfile
index edbe610..5f41f47 100644
--- a/serving/chrony/Dockerfile
+++ b/serving/chrony/Dockerfile
@@ -2,7 +2,7 @@
 # host as their time source via DHCP option 42 (dnsmasq), so they never reach the
 # public NTP pool (no workstation egress). Config is bind-mounted from
 # chrony.conf in docker-compose.yml. Build our own so the version is pinned.
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 RUN apk add --no-cache chrony
 # -d: run in the foreground (don't daemonise) so the container stays up and logs
 # to stdout for `docker compose logs`.
diff --git a/serving/dnsmasq/Dockerfile b/serving/dnsmasq/Dockerfile
index e6ed6e5..540f227 100644
--- a/serving/dnsmasq/Dockerfile
+++ b/serving/dnsmasq/Dockerfile
@@ -1,6 +1,6 @@
 # Minimal, reliable dnsmasq image (Hub dnsmasq images vary; build our own so
 # the version is pinned and the entrypoint is predictable). Config is passed
 # entirely as --flags from docker-compose.yml.
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 RUN apk add --no-cache dnsmasq
 ENTRYPOINT ["dnsmasq"]
diff --git a/serving/docker-compose.yml b/serving/docker-compose.yml
index 0b0abc4..6e4a2b7 100644
--- a/serving/docker-compose.yml
+++ b/serving/docker-compose.yml
@@ -94,7 +94,7 @@ services:
 
   # --- HTTP boot server (serves the UKI) -------------------------------------
   http:
-    image: nginx:stable
+    image: harbor.bitasylum.org/dockerhub/library/nginx:stable
     network_mode: host        # listens on :80 -> http://${SERVER_IP}/fleet-<ver>.efi
     restart: unless-stopped
     depends_on:
diff --git a/serving/kiosk-app/Dockerfile b/serving/kiosk-app/Dockerfile
index 1546f4b..6ab2f0f 100644
--- a/serving/kiosk-app/Dockerfile
+++ b/serving/kiosk-app/Dockerfile
@@ -6,7 +6,7 @@
 # so this image only needs to serve the built assets at its own root.
 
 # ---- build stage ----
-FROM node:22-alpine AS build
+FROM harbor.bitasylum.org/dockerhub/library/node:22-alpine AS build
 WORKDIR /app
 
 # Install deps first for layer caching. package-lock.json is committed, so use
@@ -18,7 +18,7 @@ COPY . .
 RUN npm run build        # -> /app/dist (base path /kiosk/)
 
 # ---- serve stage ----
-FROM nginx:stable-alpine
+FROM harbor.bitasylum.org/dockerhub/library/nginx:stable-alpine
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 COPY --from=build /app/dist /usr/share/nginx/html
 
diff --git a/serving/spdk/Dockerfile b/serving/spdk/Dockerfile
index b0bd316..2e7a7fc 100644
--- a/serving/spdk/Dockerfile
+++ b/serving/spdk/Dockerfile
@@ -6,7 +6,7 @@
 # (~10-20 min — it pulls submodules incl. DPDK and compiles them), but it's
 # self-contained, reproducible, and cached thereafter. Bump SPDK_VERSION to a
 # tag from https://github.com/spdk/spdk/releases.
-FROM ubuntu:24.04
+FROM harbor.bitasylum.org/dockerhub/library/ubuntu:24.04
 
 ARG SPDK_VERSION=v24.09
 ARG SPDK_REPO=https://github.com/spdk/spdk