Pinning Repo Versions

Author: thriqon

invfile.lua.md

@@ -61,9 +61,10 @@ as `busybox`.
 
 Firstly, we define some settings. These name utility images used later:
 
-    curl = 'appropriate/curl'
+    curl = 'appropriate/curl:3.1'
     jq = 'local_tools/jq'
     git = 'local_tools/git'
+    busybox = 'busybox:latest'
 
 We also determine where the results will be stored:
 
@@ -216,7 +217,7 @@ Finally, after testing and optionally pushing the image to the repository the
 generated files should be removed, to make room for the next package.
 
       inv.task('clean:' .. package .. ':' .. revision)
-        .using('alpine')
+        .using('alpine:latest')
           .withHostConfig({binds = {builddir .. ':/data'}})
           .run('rm', '-rf', '/data/dist', '/data/info')
 
@@ -311,7 +312,7 @@ and the final image is generated by wrapping the `dist` directory on top of
 `progrium/busybox` (a glibc-based build).
 
       inv.task('build:' .. package .. ':' .. revision)
-      .using('continuumio/miniconda')
+      .using('continuumio/miniconda:latest')
         .withConfig({entrypoint = {"/bin/sh", "-c"}})
         .withHostConfig({binds = condaBinds})
         .run(install .. package .. '=' .. conda_version
@@ -320,15 +321,15 @@ and the final image is generated by wrapping the `dist` directory on top of
         .withHostConfig({binds = condaBinds})
         .run(transformInfo)
       .wrap(builddir .. '/dist').at('/usr/local')
-        .inImage('progrium/busybox')
+        .inImage('progrium/busybox:latest')
         .as(repo)
 
 ### Cleaning up
 
 For Conda, clean up consists of removing the destination and information directories.
 
       inv.task('clean:' .. package .. ':' .. revision)
-        .using('continuumio/miniconda')
+        .using('continuumio/miniconda:latest')
           .withConfig({entrypoint = {"/bin/sh", "-c"}})
           .withHostConfig({binds = {builddir .. ':/data'}})
           .run('rm -rf /data/dist /data/info')
@@ -405,15 +406,15 @@ the output files.
           .run('$BREW test ' .. package)
           .run(extractInfo)
 
-        .wrap(builddir .. '/dist').inImage('mwcampbell/muslbase-runtime')
+        .wrap(builddir .. '/dist').inImage('mwcampbell/muslbase-runtime:latest')
           .at("/brew/").as(repo)
 
 ### Cleaning up
 
 This step removes all files generated during the run. It is run as the user `root`:
 
       inv.task('clean:' .. package .. ':' .. revision)
-      .using('thriqon/linuxbrew-alpine')
+      .using('local_tools/linuxbrew_builder')
         .withConfig({user = "root"})
         .withHostConfig({binds = {builddir .. ':/data'}})
         .run('rm', '-rf', '/data/dist', '/data/info')
@@ -475,7 +476,7 @@ repository. The socket for the Docker instance on the host is mounted into the
 container, as well as the configuration directory.  The latter is needed to
 authenticate ourselves against Quay.io.
 
-        .using('docker')
+        .using('docker:latest')
           .withHostConfig({
             binds = {
               "/var/run/docker.sock:/var/run/docker.sock",
@@ -525,7 +526,7 @@ However, we have to make sure that the file containing 'old' revisions exists in
 the package information directory. If any old revisions exist, they are copied over,
 otherwise a new array is used.
 
-    .using('busybox')
+    .using(busybox)
       .withHostConfig({binds = {
         builddir .. ':/pkg',
         './data:/data'
@@ -668,7 +669,7 @@ and store a single JSON object assinging a list of versions to each package.
     local parseGithubImages = 'map({(.image): (.versions | map(.revision))}) | add // {}'
 
     inv.task('main:versions:process_versions_from_github')
-      .using('busybox')
+      .using(busybox)
         .run('/bin/sh', '-c', 'tail -q -n +3 data/api/_images/*json > data/github_jsons.jsonl || touch data/github_jsons.jsonl')
       .using(jq)
         .run('/jq-linux64 --slurp \'' .. parseGithubImages .. '\' data/github_jsons.jsonl > data/github_versions')
@@ -704,15 +705,15 @@ exactly one line.
 The data directory will contain all data concerning the whole build process.
 
     inv.task('main:create_data_dir')
-      .using('busybox')
+      .using(busybox)
         .run('mkdir', '-p', 'data')
 
 It is not possible to have the same package identifier with the same revision
 occurring multiple times in the same `packages.tsv`. This check tests for any
 duplicates and tells the user.
 
     inv.task('main:check_uniqueness_of_keys')
-      .using('busybox')
+      .using(busybox)
         .run('/bin/sh', '-c',
           -- fields 2 and 3 are package name and revision
           "cat packages.tsv | cut -f2-3 |"
@@ -737,7 +738,7 @@ If we are doing a production build on Travis, we have to store credentials for
 GitHub (passed as environment variables) and commit/push the new API database.
 
     inv.task('main:store_github_credentials')
-      .using('busybox')
+      .using(busybox)
         .withConfig({env = {"TOKEN=" .. ENV.GITHUB_TOKEN}})
         .withHostConfig({binds = {"./data/api:/source"}})
         .run('/bin/sh', '-c', 'echo "https://${TOKEN}:@github.com" > .git/credentials')
@@ -767,26 +768,26 @@ Quite often in this tool, a generic image containing `jq` is needed. This image
 is generated as follows:
 
     inv.task('main:generate_image:jq')
-      .using('busybox')
+      .using(busybox)
         .run('mkdir', '-p', 'jq')
-      .using('appropriate/curl')
+      .using(curl)
         .run('--location',
           'https://github.com/stedolan/jq/releases/download/jq-1.5/jq-linux64',
           '-o', 'jq/jq-linux64')
-      .using('busybox')
+      .using(busybox)
         .run('chmod', 'a+x', 'jq/jq-linux64')
       .wrap('jq').at('/')
         .withConfig({entrypoint = {'/bin/sh', '-c'}})
-        .inImage('busybox').as(jq)
-      .using('busybox')
+        .inImage(busybox).as(jq)
+      .using(busybox)
         .run('rm', '-rf', 'jq')
 
 ## local_tools/git
 
 This image contains the `git` client:
 
     inv.task('main:generate_image:git')
-      .using('alpine')
+      .using('alpine:latest')
         .run('mkdir', '-p', 'alpine-git')
         .run('apk', '--root', '/source/alpine-git',
           '--update-cache', '--repository',
@@ -796,8 +797,8 @@ This image contains the `git` client:
         .run('rm', '-rf', 'alpine-git/lib/apk', 'alpine-git/var/cache/apk/')
       .wrap('alpine-git').at('/').withConfig({
           entrypoint = {'/usr/bin/git'}
-        }).inImage('alpine').as(git)
-      .using('alpine')
+        }).inImage('alpine:latest').as(git)
+      .using('alpine:latest')
         .run('rm', '-rf', 'alpine-git')
 
 ## local_tools/linuxbrew_builder
@@ -806,7 +807,7 @@ The builder image for `linuxbrew` is generated here. It contains everything
 Linuxbrew expects from the compiling host.
 
     inv.task('main:generate_image:linuxbrew_builder')
-      .using('alpine')
+      .using('alpine:latest')
         .run('mkdir', '-p', 'linuxbrew-alpine/brew', 'linuxbrew-alpine/tmp')
         .run('apk', '--root', '/source/linuxbrew-alpine',
           '--update-cache', '--repository',
@@ -818,16 +819,16 @@ Linuxbrew expects from the compiling host.
 
       .using(git)
           .run('clone', 'https://github.com/Homebrew/linuxbrew', 'linuxbrew-alpine/brew')
-      .using('alpine')
+      .using('alpine:latest')
         .run('cp', '-r', 'linuxbrew-alpine/brew/bin', 'linuxbrew-alpine/brew/orig_bin')
         .run('/bin/sh', '-c',
           'find linuxbrew-alpine/brew -print0 | xargs -0 -n 1 chown nobody:users')
         .run('chown', 'nobody:users', 'linuxbrew-alpine/brew', 'linuxbrew-alpine/tmp')
         .run('rm', '-rf', 'linuxbrew-alpine/lib/apk', 'linuxbrew-alpine/var/cache/apk/')
-      .wrap('linuxbrew-alpine').inImage('alpine')
+      .wrap('linuxbrew-alpine').inImage('alpine:latest')
         .at('/').as('local_tools/linuxbrew_builder')
 
-      .using('alpine')
+      .using('alpine:latest')
         .run('rm', '-rf', 'linuxbrew-alpine')
 
 ## Article
@@ -837,7 +838,7 @@ is using `pandoc` to transform the Markdown source into LaTeX, which is then
 compiled into PDF with `xelatex`.
 
     inv.task('article')
-      .using('thriqon/full-pandoc')
+      .using('thriqon/full-pandoc:latest')
         .run('pandoc',
           '--standalone',
           '--toc',
@@ -846,7 +847,7 @@ compiled into PDF with `xelatex`.
           '--highlight-style=pygments',
           '-o', 'mulled.tex',
           '-i', 'invfile.lua.md')
-      .using('thriqon/xelatex-docker')
+      .using('thriqon/xelatex-docker:latest')
         .run('xelatex', 'mulled.tex')
 
 ## Travis CI Build
@@ -893,13 +894,13 @@ the packages, the build environment has to be prepared:
     end
 
     inv.task('main:netrc:trusted')
-      .using('busybox')
+      .using(busybox)
         .withConfig({env = {"TOKEN=" .. ENV.GITHUB_TOKEN}})
         .run('/bin/sh', '-c', 'echo "machine github.com login $TOKEN password _" > data/netrc')
         .run('chmod', '0600', 'data/netrc')
 
     inv.task('main:netrc:plain')
-      .using('busybox')
+      .using(busybox)
         .run('/bin/sh', '-c', 'echo "machine github.com login mulled_bot password _" > data/netrc')
         .run('chmod', '0600', 'data/netrc')