diff --git a/contrib/crosvm/README.md b/contrib/crosvm/README.md
index ae4896d93..1a2352347 100644
--- a/contrib/crosvm/README.md
+++ b/contrib/crosvm/README.md
@@ -33,12 +33,12 @@ kernel:
   image: linuxkit/kernel:4.9.91
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
       - INSECURE=true
 trust:
diff --git a/examples/aws.yml b/examples/aws.yml
index 252a07b9b..3f5b510e5 100644
--- a/examples/aws.yml
+++ b/examples/aws.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/azure.yml b/examples/azure.yml
index 9df684d23..b19bdd384 100644
--- a/examples/azure.yml
+++ b/examples/azure.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub
diff --git a/examples/cadvisor.yml b/examples/cadvisor.yml
index 4d8bce1ae..63b90301e 100644
--- a/examples/cadvisor.yml
+++ b/examples/cadvisor.yml
@@ -2,33 +2,33 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
       - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: ntpd
-    image: linuxkit/openntpd:v0.4
+    image: linuxkit/openntpd:2f13536030a04f93cfaa02f816fe24f536c9943c
 
   - name: docker
     image: docker:17.10.0-ce-dind
@@ -46,7 +46,7 @@ services:
       - /etc/docker/daemon.json:/etc/docker/daemon.json
     command: ["/usr/local/bin/docker-init", "/usr/local/bin/dockerd"]
   - name: cadvisor
-    image: linuxkit/cadvisor:v0.4
+    image: linuxkit/cadvisor:9d0f7fc85a4cf50ee3fa68c83e89593f1db80d24
 files:
   - path: var/lib/docker
     directory: true
diff --git a/examples/docker-for-mac.yml b/examples/docker-for-mac.yml
index 7ea8789c1..b469b3249 100644
--- a/examples/docker-for-mac.yml
+++ b/examples/docker-for-mac.yml
@@ -3,30 +3,30 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/vpnkit-expose-port:v0.4 # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/vpnkit-expose-port:9899eef84d0a881b6a5ca5a4b4bb71e382435cb5 # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   # support metadata for optional config in /run/config
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: binfmt
-    image: linuxkit/binfmt:0f73915a3fe365615a10a811f5b83303f48949d5
+    image: linuxkit/binfmt:b0d833f5ecd26d6cb991622b1234afd9a0f6ee31
   # Format and mount the disk image in /var/lib/docker
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib"]
   # make a swap file on the mounted disk
   - name: swap
-    image: linuxkit/swap:v0.4
+    image: linuxkit/swap:e73f719b467e3dcb1eec85f1f1fd5d32fe1140bf
     command: ["/swap.sh", "--path", "/var/lib/swap", "--size", "1024M"]
   # mount-vpnkit mounts the 9p share used by vpnkit to coordinate port forwarding
   - name: mount-vpnkit
@@ -44,41 +44,41 @@ onboot:
         - /var:/host_var
     command: ["sh", "-c", "mv -v /host_var/log /host_var/lib && ln -vs /var/lib/log /host_var/log"]
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   # Enable acpi to shutdown on power events
   - name: acpid
-    image: linuxkit/acpid:v0.4
+    image: linuxkit/acpid:80b486a60dd0d55233e560db1ff096b1d5b35bbd
   # Enable getty for easier debugging
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
         - INSECURE=true
   # Run ntpd to keep time synchronised in the VM
   - name: ntpd
-    image: linuxkit/openntpd:v0.4
+    image: linuxkit/openntpd:2f13536030a04f93cfaa02f816fe24f536c9943c
   # VSOCK to unix domain socket forwarding. Forwards guest /var/run/docker.sock
   # to a socket on the host.
   - name: vsudd
-    image: linuxkit/vsudd:v0.4
+    image: linuxkit/vsudd:4d2a600d4dcefed5195a6908a1aaf0e16d48ad0c
     binds:
         - /var/run:/var/run
     command: ["/vsudd", "-inport", "2376:unix:/var/run/docker.sock"]
   # vpnkit-forwarder forwards network traffic to/from the host via VSOCK port 62373. 
   # It needs access to the vpnkit 9P coordination share 
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:v0.4
+    image: linuxkit/vpnkit-forwarder:e474ea69ccc48157b6b8053a9a5814af46b58707
     binds:
         - /var/vpnkit:/port
     net: host
     command: ["/vpnkit-forwarder", "-vsockPort", "62373"]
   # Monitor for image deletes and invoke a TRIM on the container filesystem
   - name: trim-after-delete
-    image: linuxkit/trim-after-delete:v0.4
+    image: linuxkit/trim-after-delete:1a8531c662ad4cde6f795cab9db3e622b3cf655e
   # When the host resumes from sleep, force a clock resync
   - name: host-timesync-daemon
-    image: linuxkit/host-timesync-daemon:v0.4
+    image: linuxkit/host-timesync-daemon:a54caae030f4086e482b103100f954b27a02aadd
   # Run dockerd with the vpnkit userland proxy from the vpnkit-forwarder container.
   # Bind mounts /var/run to allow vsudd to connect to docker.sock, /var/vpnkit
   # for vpnkit coordination and /run/config/docker for the configuration file.
diff --git a/examples/docker.yml b/examples/docker.yml
index 55fa779b3..74eac4ac5 100644
--- a/examples/docker.yml
+++ b/examples/docker.yml
@@ -2,31 +2,31 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: ntpd
-    image: linuxkit/openntpd:v0.4
+    image: linuxkit/openntpd:2f13536030a04f93cfaa02f816fe24f536c9943c
   - name: docker
     image: docker:17.09.0-ce-dind
     capabilities:
diff --git a/examples/gcp.yml b/examples/gcp.yml
index f6e0d83e0..8c2c149b1 100644
--- a/examples/gcp.yml
+++ b/examples/gcp.yml
@@ -2,27 +2,27 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/getty.yml b/examples/getty.yml
index b3c161260..d17c0332b 100644
--- a/examples/getty.yml
+++ b/examples/getty.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     # to make insecure with passwordless root login, uncomment following lines
     #env:
     # - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/hostmount-writeable-overlay.yml b/examples/hostmount-writeable-overlay.yml
index 6e59e52fc..a84fbc166 100644
--- a/examples/hostmount-writeable-overlay.yml
+++ b/examples/hostmount-writeable-overlay.yml
@@ -2,15 +2,15 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 onshutdown:
   - name: shutdown
@@ -18,7 +18,7 @@ onshutdown:
     command: ["/bin/echo", "so long and thanks for all the fish"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
     runtime:
@@ -30,7 +30,7 @@ services:
           destination: writeable-host-etc
           options: ["rw", "lowerdir=/etc", "upperdir=/run/hostetc/upper", "workdir=/run/hostetc/work"]
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/influxdb-os.yml b/examples/influxdb-os.yml
index 7a51382d9..3e01276f2 100644
--- a/examples/influxdb-os.yml
+++ b/examples/influxdb-os.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: influxdb
diff --git a/examples/logging.yml b/examples/logging.yml
index 758078b3e..b33ed357f 100644
--- a/examples/logging.yml
+++ b/examples/logging.yml
@@ -3,21 +3,21 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:f2bc1bda1ab18146967fa1a149800aaf14bee81b
-  - linuxkit/ca-certificates:v0.4
-  - linuxkit/memlogd:883f0d46e7d3ae2d787e8acb496da115a4707cbc
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
+  - linuxkit/memlogd:19e58ab6ae2c6be1751260aa60e91c441eda1294
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.4
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
 # Inside the getty type `/proc/1/root/usr/bin/logread -F` to follow the log
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
 # A service which generates log messages for testing
diff --git a/examples/minimal.yml b/examples/minimal.yml
index e78f2173f..c0a1d11d2 100644
--- a/examples/minimal.yml
+++ b/examples/minimal.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
 trust:
diff --git a/examples/node_exporter.yml b/examples/node_exporter.yml
index a51788db7..62dbfb4ca 100644
--- a/examples/node_exporter.yml
+++ b/examples/node_exporter.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: node_exporter
-    image: linuxkit/node_exporter:v0.4
+    image: linuxkit/node_exporter:be55316c1843b237a77d09ea8f57462c0f8dbbdd
 trust:
   org:
     - linuxkit
diff --git a/examples/openstack.yml b/examples/openstack.yml
index 00fecd769..bd1de5471 100644
--- a/examples/openstack.yml
+++ b/examples/openstack.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
     command: ["/usr/bin/metadata", "openstack"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/packet.arm64.yml b/examples/packet.arm64.yml
index 23144e0f5..5f59dd402 100644
--- a/examples/packet.arm64.yml
+++ b/examples/packet.arm64.yml
@@ -10,5 +10,5 @@ kernel:
   ucode: ""
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.4
+    image: linuxkit/modprobe:e1f78caa4c3a64a239ffb23c81622b4104cba5a0
     command: ["modprobe", "nicvf"]
diff --git a/examples/packet.yml b/examples/packet.yml
index 3f59b523e..8e4c2a8b9 100644
--- a/examples/packet.yml
+++ b/examples/packet.yml
@@ -3,32 +3,32 @@ kernel:
   cmdline: console=ttyS1
   ucode: intel-ucode.cpio
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
-  - linuxkit/firmware:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
+  - linuxkit/firmware:eac78cc21acd33a871d8b5f64a17c574cebb4c73
 onboot:
   - name: rngd1
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
     command: ["/sbin/rngd", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
     command: ["/usr/bin/metadata", "packet"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub
diff --git a/examples/redis-os.yml b/examples/redis-os.yml
index 0883ce455..3536048ba 100644
--- a/examples/redis-os.yml
+++ b/examples/redis-os.yml
@@ -4,16 +4,16 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   # Currently redis:4.0.6-alpine has trust issue with multi-arch
diff --git a/examples/rt-for-vmware.yml b/examples/rt-for-vmware.yml
index 940638b99..d685df477 100644
--- a/examples/rt-for-vmware.yml
+++ b/examples/rt-for-vmware.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:4.14.53-rt
   cmdline: "console=tty0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: open-vm-tools
-    image: linuxkit/open-vm-tools:v0.4
+    image: linuxkit/open-vm-tools:b36c4f55b86a28939e4eb726fc8999f842b0a213
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/scaleway.yml b/examples/scaleway.yml
index 00a9f3f2f..cac4ad2d2 100644
--- a/examples/scaleway.yml
+++ b/examples/scaleway.yml
@@ -2,28 +2,28 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0 root=/dev/vda"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: rngd1
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
     command: ["/sbin/rngd", "-1"]
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
 trust:
   org:
     - linuxkit
diff --git a/examples/sshd.yml b/examples/sshd.yml
index 90b4c2d52..6e44efa5c 100644
--- a/examples/sshd.yml
+++ b/examples/sshd.yml
@@ -2,27 +2,27 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: rngd1
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
     command: ["/sbin/rngd", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub
diff --git a/examples/swap.yml b/examples/swap.yml
index 51278a068..a0c77e64c 100644
--- a/examples/swap.yml
+++ b/examples/swap.yml
@@ -2,33 +2,33 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/external"]
   - name: swap
-    image: linuxkit/swap:v0.4
+    image: linuxkit/swap:e73f719b467e3dcb1eec85f1f1fd5d32fe1140bf
     # to use unencrypted swap, use:
     # command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
     command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
 trust:
   org:
     - linuxkit
diff --git a/examples/tpm.yml b/examples/tpm.yml
index 11eb50f1c..e17e2720b 100644
--- a/examples/tpm.yml
+++ b/examples/tpm.yml
@@ -2,25 +2,25 @@ kernel:
   image: linuxkit/kernel:4.9.38
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: tss
-    image: linuxkit/tss:v0.4
+    image: linuxkit/tss:1be95ab914493a11929930b8900bde812be0dcaa
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/vmware.yml b/examples/vmware.yml
index adb11df16..0d878f509 100644
--- a/examples/vmware.yml
+++ b/examples/vmware.yml
@@ -2,22 +2,22 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/vpnkit-forwarder.yml b/examples/vpnkit-forwarder.yml
index 35fbc8052..21ee4c9ed 100644
--- a/examples/vpnkit-forwarder.yml
+++ b/examples/vpnkit-forwarder.yml
@@ -2,12 +2,12 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: mount-vpnkit
     image: alpine:3.7
@@ -19,9 +19,9 @@ onboot:
     command: ["sh", "-c", "mkdir /host_var/vpnkit && mount -v -t 9p -o trans=virtio,dfltuid=1001,dfltgid=50,version=9p2000 port /host_var/vpnkit"]
 services:
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:v0.4
+    image: linuxkit/vpnkit-forwarder:e474ea69ccc48157b6b8053a9a5814af46b58707
     binds:
         - /var/vpnkit:/port
     net: host
diff --git a/examples/vsudd-containerd.yml b/examples/vsudd-containerd.yml
index 02d4deea5..678eac3a0 100644
--- a/examples/vsudd-containerd.yml
+++ b/examples/vsudd-containerd.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: vsudd
-    image: linuxkit/vsudd:v0.4
+    image: linuxkit/vsudd:4d2a600d4dcefed5195a6908a1aaf0e16d48ad0c
     binds:
         - /run/containerd/containerd.sock:/run/containerd/containerd.sock
     command: ["/vsudd",
diff --git a/examples/vultr.yml b/examples/vultr.yml
index f6e0d83e0..8c2c149b1 100644
--- a/examples/vultr.yml
+++ b/examples/vultr.yml
@@ -2,27 +2,27 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:ae402c118338c0285625c0094525eb0a90085a58
+    image: linuxkit/metadata:7d885acd45923cc3406a40dc4fa4be24903e3cd2
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/wireguard.yml b/examples/wireguard.yml
index 6ceac3c37..e7af78e36 100644
--- a/examples/wireguard.yml
+++ b/examples/wireguard.yml
@@ -2,18 +2,18 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: wg0
-    image: linuxkit/ip:v0.4
+    image: linuxkit/ip:dd18c95e8add1dde51864d221efc02290a8ee7d0
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -26,7 +26,7 @@ onboot:
       bindNS:
           net: /run/netns/wg0
   - name: wg1
-    image: linuxkit/ip:v0.4
+    image: linuxkit/ip:dd18c95e8add1dde51864d221efc02290a8ee7d0
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -40,12 +40,12 @@ onboot:
           net: /run/netns/wg1
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
     net: /run/netns/wg1
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: nginx
     image: nginx:1.13.8-alpine
     net: /run/netns/wg0
diff --git a/linuxkit.yml b/linuxkit.yml
index 3f7dda00b..10dc11353 100644
--- a/linuxkit.yml
+++ b/linuxkit.yml
@@ -2,15 +2,15 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 onshutdown:
   - name: shutdown
@@ -18,11 +18,11 @@ onshutdown:
     command: ["/bin/echo", "so long and thanks for all the fish"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/projects/clear-containers/clear-containers.yml b/projects/clear-containers/clear-containers.yml
index 43ec32e9e..2a5e2535f 100644
--- a/projects/clear-containers/clear-containers.yml
+++ b/projects/clear-containers/clear-containers.yml
@@ -2,7 +2,7 @@ kernel:
   image: linuxkit/kernel-clear-containers:4.9.x
   cmdline: "root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro rw rootfstype=ext4 tsc=reliable no_timer_check rcupdate.rcu_expedited=1 i8042.direct=1 i8042.dumbkbd=1 i8042.nopnp=1 i8042.noaux=1 noreplace-smp reboot=k panic=1 console=hvc0 console=hvc1 initcall_debug iommu=off quiet  cryptomgr.notests page_poison=on"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
 onboot:
   - name: sysctl
     image: mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c
diff --git a/projects/compose/compose-dynamic.yml b/projects/compose/compose-dynamic.yml
index 36c13da47..fb2ecd5a5 100644
--- a/projects/compose/compose-dynamic.yml
+++ b/projects/compose/compose-dynamic.yml
@@ -2,28 +2,28 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: ntpd
-    image: linuxkit/openntpd:v0.4
+    image: linuxkit/openntpd:2f13536030a04f93cfaa02f816fe24f536c9943c
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:
diff --git a/projects/compose/compose-static.yml b/projects/compose/compose-static.yml
index e4c8d32f5..18d9d8206 100644
--- a/projects/compose/compose-static.yml
+++ b/projects/compose/compose-static.yml
@@ -2,28 +2,28 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: ntpd
-    image: linuxkit/openntpd:v0.4
+    image: linuxkit/openntpd:2f13536030a04f93cfaa02f816fe24f536c9943c
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:
diff --git a/projects/ima-namespace/ima-namespace.yml b/projects/ima-namespace/ima-namespace.yml
index dfa03c547..6cda1600f 100644
--- a/projects/ima-namespace/ima-namespace.yml
+++ b/projects/ima-namespace/ima-namespace.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel-ima:4.11.1-186dd3605ee7b23214850142f8f02b4679dbd148
   cmdline: "console=ttyS0 console=tty0 page_poison=1 ima_appraise=enforce_ns"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
   - linuxkit/ima-utils:dfeb3896fd29308b80ff9ba7fe5b8b767e40ca29
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/projects/landlock/landlock.yml b/projects/landlock/landlock.yml
index b12bad07f..553956740 100644
--- a/projects/landlock/landlock.yml
+++ b/projects/landlock/landlock.yml
@@ -2,7 +2,7 @@ kernel:
   image: mobylinux/kernel-landlock:4.9.x
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
   - mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
   - mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b
   - mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
diff --git a/projects/memorizer/memorizer.yml b/projects/memorizer/memorizer.yml
index 6d5eda1ae..73fa04b32 100644
--- a/projects/memorizer/memorizer.yml
+++ b/projects/memorizer/memorizer.yml
@@ -2,16 +2,16 @@ kernel:
   image: "linuxkitprojects/kernel-memorizer:4.10_dbg-17e2eee03ab59f8df8a9c10ace003a84aec2f540"
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
 trust:
diff --git a/projects/miragesdk/examples/fdd.yml b/projects/miragesdk/examples/fdd.yml
index b296b8a66..2c901606c 100644
--- a/projects/miragesdk/examples/fdd.yml
+++ b/projects/miragesdk/examples/fdd.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkit/kernel:4.9.34
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
   - samoht/fdd
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
 files:
   - path: etc/init.d/020-fdd-init
     mode: "0700"
diff --git a/projects/miragesdk/examples/mirage-dhcp.yml b/projects/miragesdk/examples/mirage-dhcp.yml
index 70d05912f..842f21f16 100644
--- a/projects/miragesdk/examples/mirage-dhcp.yml
+++ b/projects/miragesdk/examples/mirage-dhcp.yml
@@ -2,12 +2,12 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcp-client
     image: miragesdk/dhcp-client:22aa9d527820534295a8cd59901c0c5197af6585
     net: host
@@ -28,9 +28,9 @@ onboot:
      - /lib:/lib     # for ifconfig
 services:
   - name: sshd
-    image: linuxkit/sshd:2c7e6e36bd0ffa2b3d950cf9128da89ba3375dbb
+    image: linuxkit/sshd:ae16b868747913bad83ad1b5823669eff1563013
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
 files:
diff --git a/projects/okernel/examples/okernel_simple.yaml b/projects/okernel/examples/okernel_simple.yaml
index 1c842ba1d..8c13726a4 100644
--- a/projects/okernel/examples/okernel_simple.yaml
+++ b/projects/okernel/examples/okernel_simple.yaml
@@ -2,18 +2,18 @@ kernel:
   image: okernel:latest
   cmdline: "console=tty0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
 services:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
 trust:
diff --git a/projects/shiftfs/shiftfs.yml b/projects/shiftfs/shiftfs.yml
index ab69ec374..d5b3aa69c 100644
--- a/projects/shiftfs/shiftfs.yml
+++ b/projects/shiftfs/shiftfs.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkitprojects/kernel-shiftfs:4.11.4-881a041fc14bd95814cf140b5e98d97dd65160b5
   cmdline: "console=ttyS0 console=tty0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/test/cases/000_build/000_formats/test.yml b/test/cases/000_build/000_formats/test.yml
index 803f3d25d..0c8dbb384 100644
--- a/test/cases/000_build/000_formats/test.yml
+++ b/test/cases/000_build/000_formats/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 trust:
   org:
diff --git a/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml b/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
index 75580baee..584fcc4bd 100644
--- a/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
+++ b/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml b/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
index 75580baee..584fcc4bd 100644
--- a/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
+++ b/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/010_run_iso/test.yml b/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
index 68d809893..e2115e28b 100644
--- a/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
+++ b/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/020_run_efi/test.yml b/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
+++ b/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml b/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml b/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/050_run_aws/test.yml b/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
+++ b/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/000_qemu/100_container/test.yml b/test/cases/010_platforms/000_qemu/100_container/test.yml
index b6b285e1a..5254cb324 100644
--- a/test/cases/010_platforms/000_qemu/100_container/test.yml
+++ b/test/cases/010_platforms/000_qemu/100_container/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml b/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml b/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
index dc0492d1f..92f97f57e 100644
--- a/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml b/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
index 7f8874b2a..035c5ef79 100644
--- a/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
@@ -2,12 +2,12 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 services:
   - name: acpid
-    image: linuxkit/acpid:v0.4
+    image: linuxkit/acpid:80b486a60dd0d55233e560db1ff096b1d5b35bbd
 trust:
   org:
     - linuxkit
diff --git a/test/cases/020_kernel/000_config_4.4.x/test.yml b/test/cases/020_kernel/000_config_4.4.x/test.yml
index 3502b1a89..aedfd26a4 100644
--- a/test/cases/020_kernel/000_config_4.4.x/test.yml
+++ b/test/cases/020_kernel/000_config_4.4.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.4.139
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check-kernel-config
     image: linuxkit/test-kernel-config:0c214d1854b7d98e29ec9ea618befd5529b627ae
diff --git a/test/cases/020_kernel/001_config_4.9.x/test.yml b/test/cases/020_kernel/001_config_4.9.x/test.yml
index 5819f86e4..f5a0bfd6f 100644
--- a/test/cases/020_kernel/001_config_4.9.x/test.yml
+++ b/test/cases/020_kernel/001_config_4.9.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.9.111
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check-kernel-config
     image: linuxkit/test-kernel-config:0c214d1854b7d98e29ec9ea618befd5529b627ae
diff --git a/test/cases/020_kernel/006_config_4.14.x/test.yml b/test/cases/020_kernel/006_config_4.14.x/test.yml
index 6f764adfc..cc7ded68a 100644
--- a/test/cases/020_kernel/006_config_4.14.x/test.yml
+++ b/test/cases/020_kernel/006_config_4.14.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check-kernel-config
     image: linuxkit/test-kernel-config:0c214d1854b7d98e29ec9ea618befd5529b627ae
diff --git a/test/cases/020_kernel/009_config_4.17.x/test.yml b/test/cases/020_kernel/009_config_4.17.x/test.yml
index 1f93e2886..6a06c6f24 100644
--- a/test/cases/020_kernel/009_config_4.17.x/test.yml
+++ b/test/cases/020_kernel/009_config_4.17.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.17.4
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check-kernel-config
     image: linuxkit/test-kernel-config:0c214d1854b7d98e29ec9ea618befd5529b627ae
diff --git a/test/cases/020_kernel/010_kmod_4.4.x/test.yml b/test/cases/020_kernel/010_kmod_4.4.x/test.yml
index 9da91bfa9..7c24868cd 100644
--- a/test/cases/020_kernel/010_kmod_4.4.x/test.yml
+++ b/test/cases/020_kernel/010_kmod_4.4.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.4.139
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check
     image: kmod-test
diff --git a/test/cases/020_kernel/011_kmod_4.9.x/test.yml b/test/cases/020_kernel/011_kmod_4.9.x/test.yml
index 144b2ef1a..4bd3d6d6d 100644
--- a/test/cases/020_kernel/011_kmod_4.9.x/test.yml
+++ b/test/cases/020_kernel/011_kmod_4.9.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.9.111
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check
     image: kmod-test
diff --git a/test/cases/020_kernel/016_kmod_4.14.x/test.yml b/test/cases/020_kernel/016_kmod_4.14.x/test.yml
index 0f1fef51f..012138e3c 100644
--- a/test/cases/020_kernel/016_kmod_4.14.x/test.yml
+++ b/test/cases/020_kernel/016_kmod_4.14.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check
     image: kmod-test
diff --git a/test/cases/020_kernel/019_kmod_4.17.x/test.yml b/test/cases/020_kernel/019_kmod_4.17.x/test.yml
index 9b4d5c7d3..74363e0d4 100644
--- a/test/cases/020_kernel/019_kmod_4.17.x/test.yml
+++ b/test/cases/020_kernel/019_kmod_4.17.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.17.4
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: check
     image: kmod-test
diff --git a/test/cases/020_kernel/110_namespace/common.yml b/test/cases/020_kernel/110_namespace/common.yml
index e3a429189..9a31d93e4 100644
--- a/test/cases/020_kernel/110_namespace/common.yml
+++ b/test/cases/020_kernel/110_namespace/common.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 trust:
   org:
     - linuxkit
diff --git a/test/cases/030_security/000_docker-bench/test.yml b/test/cases/030_security/000_docker-bench/test.yml
index 49a15bf30..d81e8b777 100644
--- a/test/cases/030_security/000_docker-bench/test.yml
+++ b/test/cases/030_security/000_docker-bench/test.yml
@@ -2,25 +2,25 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: sysfs
-    image: linuxkit/sysfs:v0.4
+    image: linuxkit/sysfs:6d1b016e1a7834ccc72bd4570fadd22933665ec8
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.4
+    image: linuxkit/rngd:68dbb9f121634e7fcf538ab1c54f3eb2e2430e85
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:
diff --git a/test/cases/030_security/010_ports/test.yml b/test/cases/030_security/010_ports/test.yml
index 9d8dfd5a6..6aea82d9f 100644
--- a/test/cases/030_security/010_ports/test.yml
+++ b/test/cases/030_security/010_ports/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/002_binfmt/test.yml b/test/cases/040_packages/002_binfmt/test.yml
index df52c11d2..1f9ceec48 100644
--- a/test/cases/040_packages/002_binfmt/test.yml
+++ b/test/cases/040_packages/002_binfmt/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: binfmt
-    image: linuxkit/binfmt:0f73915a3fe365615a10a811f5b83303f48949d5
+    image: linuxkit/binfmt:b0d833f5ecd26d6cb991622b1234afd9a0f6ee31
   - name: test
     image: alpine:3.7
     binds:
diff --git a/test/cases/040_packages/003_ca-certificates/test.yml b/test/cases/040_packages/003_ca-certificates/test.yml
index 21a0d64e1..08843c8f0 100644
--- a/test/cases/040_packages/003_ca-certificates/test.yml
+++ b/test/cases/040_packages/003_ca-certificates/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/003_containerd/test.yml b/test/cases/040_packages/003_containerd/test.yml
index 69ef69a29..6d35c3243 100644
--- a/test/cases/040_packages/003_containerd/test.yml
+++ b/test/cases/040_packages/003_containerd/test.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib"]
   - name: test
     image: linuxkit/test-containerd:fa65dbd15e2d5d671560f89d8de2e2986059161f
diff --git a/test/cases/040_packages/004_dhcpcd/test.yml b/test/cases/040_packages/004_dhcpcd/test.yml
index 07935099e..ca20d7acd 100644
--- a/test/cases/040_packages/004_dhcpcd/test.yml
+++ b/test/cases/040_packages/004_dhcpcd/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/000_ext4/test-create.yml b/test/cases/040_packages/005_extend/000_ext4/test-create.yml
index 1ab067f5c..b96168df8 100644
--- a/test/cases/040_packages/005_extend/000_ext4/test-create.yml
+++ b/test/cases/040_packages/005_extend/000_ext4/test-create.yml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/000_ext4/test.yml b/test/cases/040_packages/005_extend/000_ext4/test.yml
index 24dd6fea6..beb0bbc96 100644
--- a/test/cases/040_packages/005_extend/000_ext4/test.yml
+++ b/test/cases/040_packages/005_extend/000_ext4/test.yml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: extend
-    image: linuxkit/extend:v0.4
+    image: linuxkit/extend:87bb27ba1cd275e98214d2c8edc600b2a836730f
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/001_btrfs/test-create.yml b/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
index 46743c0ee..1a38251db 100644
--- a/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
+++ b/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.4
+    image: linuxkit/modprobe:e1f78caa4c3a64a239ffb23c81622b4104cba5a0
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/001_btrfs/test.yml b/test/cases/040_packages/005_extend/001_btrfs/test.yml
index 1caa697db..1457c2166 100644
--- a/test/cases/040_packages/005_extend/001_btrfs/test.yml
+++ b/test/cases/040_packages/005_extend/001_btrfs/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.4
+    image: linuxkit/modprobe:e1f78caa4c3a64a239ffb23c81622b4104cba5a0
     command: ["modprobe", "btrfs"]
   - name: extend
-    image: linuxkit/extend:v0.4
+    image: linuxkit/extend:87bb27ba1cd275e98214d2c8edc600b2a836730f
     command: ["/usr/bin/extend", "-type", "btrfs"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/002_xfs/test-create.yml b/test/cases/040_packages/005_extend/002_xfs/test-create.yml
index 54f465641..2fc7b1ce7 100644
--- a/test/cases/040_packages/005_extend/002_xfs/test-create.yml
+++ b/test/cases/040_packages/005_extend/002_xfs/test-create.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/005_extend/002_xfs/test.yml b/test/cases/040_packages/005_extend/002_xfs/test.yml
index 7d8fc2ee8..d0d176551 100644
--- a/test/cases/040_packages/005_extend/002_xfs/test.yml
+++ b/test/cases/040_packages/005_extend/002_xfs/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: extend
-    image: linuxkit/extend:v0.4
+    image: linuxkit/extend:87bb27ba1cd275e98214d2c8edc600b2a836730f
     command: ["/usr/bin/extend", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/000_auto/test.yml b/test/cases/040_packages/006_format_mount/000_auto/test.yml
index bbd8eb26f..92acd5fbf 100644
--- a/test/cases/040_packages/006_format_mount/000_auto/test.yml
+++ b/test/cases/040_packages/006_format_mount/000_auto/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/001_by_label/test.yml b/test/cases/040_packages/006_format_mount/001_by_label/test.yml
index 40a2891df..c54d67127 100644
--- a/test/cases/040_packages/006_format_mount/001_by_label/test.yml
+++ b/test/cases/040_packages/006_format_mount/001_by_label/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-label", "docker"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in b/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
index b20831832..1818f0bed 100644
--- a/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
+++ b/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.9.38
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "@DEVICE@"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "-device", "@DEVICE@1", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/003_btrfs/test.yml b/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
index 84ef27570..f44fc1e8f 100644
--- a/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
+++ b/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.4
+    image: linuxkit/modprobe:e1f78caa4c3a64a239ffb23c81622b4104cba5a0
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/004_xfs/test.yml b/test/cases/040_packages/006_format_mount/004_xfs/test.yml
index bc16996fc..abe2f30ea 100644
--- a/test/cases/040_packages/006_format_mount/004_xfs/test.yml
+++ b/test/cases/040_packages/006_format_mount/004_xfs/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-type", "xfs" ]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml b/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
index a31e3bed0..af70239be 100644
--- a/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
+++ b/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkit/kernel:4.9.51
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sda"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sdb"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-verbose", "-type", "xfs", "/dev/sda"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-verbose", "-force", "-type", "xfs", "/dev/sdb"]
   - name: test
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     binds:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
diff --git a/test/cases/040_packages/006_format_mount/010_multiple/test.yml b/test/cases/040_packages/006_format_mount/010_multiple/test.yml
index 0ec941e5a..52f5d15b1 100644
--- a/test/cases/040_packages/006_format_mount/010_multiple/test.yml
+++ b/test/cases/040_packages/006_format_mount/010_multiple/test.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-label", "docker"]
   - name: format
-    image: linuxkit/format:v0.4
+    image: linuxkit/format:c5e3200c3eeaed2652314869c08197098fd1f843
     command: ["/usr/bin/format", "-label", "foo"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: mount
-    image: linuxkit/mount:v0.4
+    image: linuxkit/mount:6b25743397b520924de11f96e3eeb613aa04a507
     command: ["/usr/bin/mountie", "-label", "foo", "/var/foo"]
   - name: test
     image: alpine:3.7
diff --git a/test/cases/040_packages/007_getty-containerd/test.yml b/test/cases/040_packages/007_getty-containerd/test.yml
index aea6adda7..6029c1750 100644
--- a/test/cases/040_packages/007_getty-containerd/test.yml
+++ b/test/cases/040_packages/007_getty-containerd/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:4.9.x
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:44730fd0a7c59dbacf5b48b54ba33f551bcf7ef0
+    image: linuxkit/getty:3763a7fc3fddedc185bbd6f7f583f729e57fbeda
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/test/cases/040_packages/013_mkimage/mkimage.yml b/test/cases/040_packages/013_mkimage/mkimage.yml
index 5a8ac7d28..7cb0a678d 100644
--- a/test/cases/040_packages/013_mkimage/mkimage.yml
+++ b/test/cases/040_packages/013_mkimage/mkimage.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: mkimage
-    image: linuxkit/mkimage:v0.4
+    image: linuxkit/mkimage:11ae974e84cf99de5c1bac927f67f235845a3df4
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
 trust:
diff --git a/test/cases/040_packages/013_mkimage/run.yml b/test/cases/040_packages/013_mkimage/run.yml
index 74413e080..e93bf0087 100644
--- a/test/cases/040_packages/013_mkimage/run.yml
+++ b/test/cases/040_packages/013_mkimage/run.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: poweroff
     image: linuxkit/poweroff:37021954220a932951eca5de5a856865e48cfc00
diff --git a/test/cases/040_packages/019_sysctl/test.yml b/test/cases/040_packages/019_sysctl/test.yml
index f5d81bb4f..d8dabee59 100644
--- a/test/cases/040_packages/019_sysctl/test.yml
+++ b/test/cases/040_packages/019_sysctl/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.4
+    image: linuxkit/sysctl:6f96e509c7383b31dfdd2c3e9fa01c6ab3e4c586
   - name: test
     image: alpine:3.7
     net: host
diff --git a/test/cases/040_packages/023_wireguard/test.yml b/test/cases/040_packages/023_wireguard/test.yml
index eb253599d..20e35ea94 100644
--- a/test/cases/040_packages/023_wireguard/test.yml
+++ b/test/cases/040_packages/023_wireguard/test.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
-  - linuxkit/ca-certificates:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
+  - linuxkit/ca-certificates:ce2692e89d2be341b0d3caa0b0aa01b37d5d0694
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: wg0
-    image: linuxkit/ip:v0.4
+    image: linuxkit/ip:dd18c95e8add1dde51864d221efc02290a8ee7d0
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -24,7 +24,7 @@ onboot:
       bindNS:
           net: /run/netns/wg0
   - name: wg1
-    image: linuxkit/ip:v0.4
+    image: linuxkit/ip:dd18c95e8add1dde51864d221efc02290a8ee7d0
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
diff --git a/test/hack/test-ltp.yml b/test/hack/test-ltp.yml
index 7bede0864..d1402d7b9 100644
--- a/test/hack/test-ltp.yml
+++ b/test/hack/test-ltp.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: ltp
     image: linuxkit/test-ltp:0967388fb338867dddd3c1a72470a1a7cec5a0dd
diff --git a/test/hack/test.yml b/test/hack/test.yml
index 7bb665758..af77cc7c4 100644
--- a/test/hack/test.yml
+++ b/test/hack/test.yml
@@ -4,12 +4,12 @@ kernel:
   image: linuxkit/kernel:4.14.53
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
-  - linuxkit/containerd:27a4c84cc8fab2d5ea04342546ecd20453ec99b3
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
+  - linuxkit/containerd:92c92a485b881b7b589ccc4a6279224931c8cadf
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:1fe0db6b1eb7bcb1e4823e61e08afe6d48af7d16
+    image: linuxkit/dhcpcd:0aa201ad1a4c134f0ed6ab2cec23602d5ee73d7f
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: check-kernel-config
     image: linuxkit/test-kernel-config:0c214d1854b7d98e29ec9ea618befd5529b627ae
diff --git a/test/pkg/ns/template.yml b/test/pkg/ns/template.yml
index 74669a1a7..f3d2b4f9a 100644
--- a/test/pkg/ns/template.yml
+++ b/test/pkg/ns/template.yml
@@ -3,8 +3,8 @@ kernel:
   image: linuxkit/kernel:4.9.38
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:6cc1442112980c889230b6449df09d5b48de6854
-  - linuxkit/runc:v0.4
+  - linuxkit/init:720920b4a1b4dd90c99e8f91d543381798c4c3cb
+  - linuxkit/runc:01b4f0706d999f9065ef44492689e43d0bcd83c5
 onboot:
   - name: test-ns
     image: linuxkit/test-ns:<hash>