anti/DECNET
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore(infra): pin Docker base images by digest (DEBT-023)

Browse Source 
All base images (debian:bookworm-slim, ubuntu:22.04, ubuntu:20.04,
rockylinux:9-minimal, centos:7, alpine:3.19, fedora:39,
kalilinux/kali-rolling, archlinux:latest, honeynet/conpot:latest)
now carry their resolved sha256 digest so 'docker pull' is
deterministic. :tag retained for human readability; @sha256 is what
Docker actually resolves. Refresh procedure documented at the top of
decnet/distros.py.
This commit is contained in:
anti
2026-05-03 04:38:39 -04:00
parent 6e19d3a25a
commit dcd558fd91
33 changed files with 74 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
decnet/templates/conpot/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=honeynet/conpot:latest
ARG BASE_IMAGE=honeynet/conpot:latest@sha256:cd93e88d9e44b020db691fc4c75cb29e76b5e90ddbc408aca26e6c78c5646976
FROM ${BASE_IMAGE}
USER root

2
decnet/templates/cowrie/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/docker_api/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/elasticsearch/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/ftp/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/http/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/https/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/imap/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/k8s/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/ldap/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/llmnr/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/mongodb/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/mqtt/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/mssql/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/mysql/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/pop3/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/postgres/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/rdp/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/redis/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/sip/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/smb/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/smtp/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/sniffer/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/snmp/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

4
decnet/templates/ssh/Dockerfile
View File

@@ -1,10 +1,10 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
# ── Stage 1: build the static auth-helper credential-capture binary ──────────
# Compiled against musl so the resulting binary is fully static — runs on
# any glibc/musl Linux without a libc version match. Stripped at link
# time via -s so `file /usr/sbin/auth-helper` reports a generic ELF.
FROM debian:bookworm-slim AS auth-helper-build
FROM debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252 AS auth-helper-build
RUN apt-get update && apt-get install -y --no-install-recommends musl-tools \
&& rm -rf /var/lib/apt/lists/*
COPY auth-helper/auth-helper.c /tmp/auth-helper.c

4
decnet/templates/telnet/Dockerfile
View File

@@ -1,11 +1,11 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
# ── Stage 1: build the static auth-helper credential-capture binary ──────────
# Same source the SSH template builds — generic over PAM service. Wired
# into /etc/pam.d/login below so every busybox-telnetd → /bin/login auth
# attempt is captured before pam_unix runs. Static + musl: ~38 KB ELF,
# zero libc version coupling, runs anywhere.
FROM debian:bookworm-slim AS auth-helper-build
FROM debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252 AS auth-helper-build
RUN apt-get update && apt-get install -y --no-install-recommends musl-tools \
&& rm -rf /var/lib/apt/lists/*
COPY auth-helper/auth-helper.c /tmp/auth-helper.c

2
decnet/templates/tftp/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \

2
decnet/templates/vnc/Dockerfile
View File

@@ -1,4 +1,4 @@
ARG BASE_IMAGE=debian:bookworm-slim
ARG BASE_IMAGE=debian:bookworm-slim@sha256:f9c6a2fd2ddbc23e336b6257a5245e31f996953ef06cd13a59fa0a1df2d5c252
FROM ${BASE_IMAGE}
RUN apt-get update && apt-get install -y --no-install-recommends \