Point images at harbor

serving/audit-collector/Dockerfile

@@ -4,7 +4,7 @@
 # fleet serving stack. Booted hosts forward auditd + syslog here; records land
 # under /var/log/remote/<sender-ip>/. See rsyslog.conf + README.md.
 
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 
 RUN apk add --no-cache rsyslog tzdata \
     && mkdir -p /var/log/remote /var/spool/rsyslog

serving/chrony/Dockerfile

@@ -2,7 +2,7 @@
 # host as their time source via DHCP option 42 (dnsmasq), so they never reach the
 # public NTP pool (no workstation egress). Config is bind-mounted from
 # chrony.conf in docker-compose.yml. Build our own so the version is pinned.
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 RUN apk add --no-cache chrony
 # -d: run in the foreground (don't daemonise) so the container stays up and logs
 # to stdout for `docker compose logs`.

serving/dnsmasq/Dockerfile

@@ -1,6 +1,6 @@
 # Minimal, reliable dnsmasq image (Hub dnsmasq images vary; build our own so
 # the version is pinned and the entrypoint is predictable). Config is passed
 # entirely as --flags from docker-compose.yml.
-FROM alpine:3.20
+FROM harbor.bitasylum.org/dockerhub/library/alpine:3.20
 RUN apk add --no-cache dnsmasq
 ENTRYPOINT ["dnsmasq"]

serving/docker-compose.yml

@@ -94,7 +94,7 @@ services:
 
   # --- HTTP boot server (serves the UKI) -------------------------------------
   http:
-    image: nginx:stable
+    image: harbor.bitasylum.org/dockerhub/library/nginx:stable
     network_mode: host        # listens on :80 -> http://${SERVER_IP}/fleet-<ver>.efi
     restart: unless-stopped
     depends_on:

serving/kiosk-app/Dockerfile

@@ -6,7 +6,7 @@
 # so this image only needs to serve the built assets at its own root.
 
 # ---- build stage ----
-FROM node:22-alpine AS build
+FROM harbor.bitasylum.org/dockerhub/library/node:22-alpine AS build
 WORKDIR /app
 
 # Install deps first for layer caching. package-lock.json is committed, so use
@@ -18,7 +18,7 @@ COPY . .
 RUN npm run build        # -> /app/dist (base path /kiosk/)
 
 # ---- serve stage ----
-FROM nginx:stable-alpine
+FROM harbor.bitasylum.org/dockerhub/library/nginx:stable-alpine
 COPY nginx.conf /etc/nginx/conf.d/default.conf
 COPY --from=build /app/dist /usr/share/nginx/html
 

serving/spdk/Dockerfile

@@ -6,7 +6,7 @@
 # (~10-20 min — it pulls submodules incl. DPDK and compiles them), but it's
 # self-contained, reproducible, and cached thereafter. Bump SPDK_VERSION to a
 # tag from https://github.com/spdk/spdk/releases.
-FROM ubuntu:24.04
+FROM harbor.bitasylum.org/dockerhub/library/ubuntu:24.04
 
 ARG SPDK_VERSION=v24.09
 ARG SPDK_REPO=https://github.com/spdk/spdk