deploy: join gitea netns instead of bridge (machine kernel lacks ip_tables for rootless netavark); pin image digests; push-to-create repo

2026-07-28 14:07:44 +02:00
parent ed7a9c01e7
commit 80d886c0cb
6 changed files with 28 additions and 34 deletions
@@ -3,5 +3,5 @@
 # keeps the whole toolchain pinned and independent of host packages.
 # Built ONCE at install, never pulled again at runtime:
 #   podman build -t localhost/ctao-portal-build:1 -f Containerfile.build .
-FROM docker.io/library/node:24-alpine
+FROM docker.io/library/node:24-alpine@sha256:a0b9bf06e4e6193cf7a0f58816cc935ff8c2a908f81e6f1a95432d679c54fbfd
 RUN apk add --no-cache git