diff --git a/contrib/open-vm-tools/open-vm-tools-ds.yaml b/contrib/open-vm-tools/open-vm-tools-ds.yaml
index 3d3fd70f9..f22697259 100644
--- a/contrib/open-vm-tools/open-vm-tools-ds.yaml
+++ b/contrib/open-vm-tools/open-vm-tools-ds.yaml
@@ -30,7 +30,7 @@ spec:
         operator: Exists
         effect: NoSchedule
       containers:
-      - image: linuxkit/open-vm-tools:ab851c74c42e7e17d95a64b169e396511f89b9c0
+      - image: linuxkit/open-vm-tools:503e66e268a9764e763810c4d2514a27efbe44d3
         name: open-vm-tools
         resources:
           requests:
diff --git a/docs/alpine-base-update.md b/docs/alpine-base-update.md
index 479e76e22..dfbc4d0f9 100644
--- a/docs/alpine-base-update.md
+++ b/docs/alpine-base-update.md
@@ -131,7 +131,8 @@ following which is an explanation of each one.
 # Update tools packages
 cd $LK_ROOT/tools
 $LK_ROOT/scripts/update-component-sha.sh --image $LK_ALPINE
-git checkout grub/Dockerfile
+git checkout grub-dev/Dockerfile
+git checkout mkimage-rpi3/Dockerfile
 git commit -a -s -m "tools: Update to the latest linuxkit/alpine"
 
 # Update tools dependencies
@@ -179,8 +180,13 @@ On your primary build machine, update the other tools packages.
 
 Note, the `git checkout` reverts the changes made by
 `update-component-sha.sh` to files which are accidentally updated.
-Important is the `git checkout` of `grub`. This is a bit old and only can be built with specific
-older versions of packages like `gcc`, and should not be updated.
+Important is the `git checkout` of some sensitive packages that only can be built with
+specific older versions of upstream packages:
+
+* `grub-dev`
+* `mkimage-rpi3`
+
+Only update those if you know what you are doing with them.
 
 Then we update any dependencies of these tools.
 
diff --git a/examples/addbinds.yml b/examples/addbinds.yml
index 1d8958daf..7b154cbc2 100644
--- a/examples/addbinds.yml
+++ b/examples/addbinds.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:5.4.30
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     binds.add:
       # this will keep all of the existing ones as well
       - /var/tmp:/var/tmp
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/cadvisor.yml b/examples/cadvisor.yml
index c67353a6b..2875088ad 100644
--- a/examples/cadvisor.yml
+++ b/examples/cadvisor.yml
@@ -2,33 +2,33 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
       - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: ntpd
-    image: linuxkit/openntpd:dd353cac6cbd816008c565041cec6650090d0ad0
+    image: linuxkit/openntpd:4745ea9d3633469c860d1c3d5250303c3d96eec9
 
   - name: docker
     image: docker:20.10.6-dind
@@ -46,7 +46,7 @@ services:
       - /etc/docker/daemon.json:/etc/docker/daemon.json
     command: ["/usr/local/bin/docker-init", "/usr/local/bin/dockerd"]
   - name: cadvisor
-    image: linuxkit/cadvisor:6ae4b50f8279692c459bccd0003066d22bd558ce
+    image: linuxkit/cadvisor:1a0de2fb5329a9bc0f4b73282b0d2d51ba4a2797
 files:
   - path: var/lib/docker
     directory: true
diff --git a/examples/dm-crypt-loop.yml b/examples/dm-crypt-loop.yml
index eda1ff790..616002a26 100644
--- a/examples/dm-crypt-loop.yml
+++ b/examples/dm-crypt-loop.yml
@@ -2,30 +2,30 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "/dev/sda"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/dev/sda1", "/var/external"]
   - name: loop
-    image: linuxkit/losetup:fcee8e453684d45c3c411fe8c28ecb2210158638
+    image: linuxkit/losetup:bcee190708d1612203309435bcef8a2d0b982d92
     command: ["/usr/bin/loopy", "--create", "/var/external/storage_file"]
   - name: dm-crypt
-    image: linuxkit/dm-crypt:526d32351c8246431be8e1a168cb514ff3c365af
+    image: linuxkit/dm-crypt:501dade7be942e9203b6d640cc21ea5f975ded99
     command: ["/usr/bin/crypto", "crypt_loop_dev", "/dev/loop0"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/dev/mapper/crypt_loop_dev", "/var/secure_storage"]
   - name: bbox
     image: busybox
@@ -34,11 +34,11 @@ onboot:
       - /var:/var
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
 files:
   - path: etc/dm-crypt/key
     # the below key is just to keep the example self-contained
diff --git a/examples/dm-crypt.yml b/examples/dm-crypt.yml
index 269986342..3dc0396f9 100644
--- a/examples/dm-crypt.yml
+++ b/examples/dm-crypt.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "/dev/sda"]
   - name: dm-crypt
-    image: linuxkit/dm-crypt:526d32351c8246431be8e1a168cb514ff3c365af
+    image: linuxkit/dm-crypt:501dade7be942e9203b6d640cc21ea5f975ded99
     command: ["/usr/bin/crypto", "crypt_dev", "/dev/sda1"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/dev/mapper/crypt_dev", "/var/secure_storage"]
   - name: bbox
     image: busybox
@@ -28,11 +28,11 @@ onboot:
       - /var:/var
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
 files:
   - path: etc/dm-crypt/key
     # the below key is just to keep the example self-contained
diff --git a/examples/docker-for-mac.yml b/examples/docker-for-mac.yml
index 03d5da07c..c35888640 100644
--- a/examples/docker-for-mac.yml
+++ b/examples/docker-for-mac.yml
@@ -3,30 +3,30 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/vpnkit-expose-port:c61565ee34e58823aaf7c05fd6359a8fd889137f # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/vpnkit-expose-port:8f9811ec15dbeb5eb37336f66ca97289870fe11d # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   # support metadata for optional config in /run/config
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: binfmt
-    image: linuxkit/binfmt:8960cf2852ef5dccd8cb0746d8ba48ce4fe4651d
+    image: linuxkit/binfmt:312ed1cb899fae229b5303ac6c0510ac58f331c8
   # Format and mount the disk image in /var/lib/docker
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib"]
   # make a swap file on the mounted disk
   - name: swap
-    image: linuxkit/swap:d17a7f1c26ff768c26b3c206ccf3aa72349568df
+    image: linuxkit/swap:ace4fd36355cd24cb8428122f46a2ae8a113d9ac
     command: ["/swap.sh", "--path", "/var/lib/swap", "--size", "1024M"]
   # mount-vpnkit mounts the 9p share used by vpnkit to coordinate port forwarding
   - name: mount-vpnkit
@@ -44,41 +44,41 @@ onboot:
         - /var:/host_var
     command: ["sh", "-c", "mv -v /host_var/log /host_var/lib && ln -vs /var/lib/log /host_var/log"]
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   # Enable acpi to shutdown on power events
   - name: acpid
-    image: linuxkit/acpid:548f8f1c8bda31cdbefb65bdb0747f97c17639d2
+    image: linuxkit/acpid:c9d5ab81d3312602f3b17b266be9c60127e8f5ec
   # Enable getty for easier debugging
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
         - INSECURE=true
   # Run ntpd to keep time synchronised in the VM
   - name: ntpd
-    image: linuxkit/openntpd:dd353cac6cbd816008c565041cec6650090d0ad0
+    image: linuxkit/openntpd:4745ea9d3633469c860d1c3d5250303c3d96eec9
   # VSOCK to unix domain socket forwarding. Forwards guest /var/run/docker.sock
   # to a socket on the host.
   - name: vsudd
-    image: linuxkit/vsudd:5b962bdd22524b4edb7f428de745376abe359596
+    image: linuxkit/vsudd:f1ced526fee6df1ef2e46f87c503ef4a8fd48151
     binds:
         - /var/run:/var/run
     command: ["/vsudd", "-inport", "2376:unix:/var/run/docker.sock"]
   # vpnkit-forwarder forwards network traffic to/from the host via VSOCK port 62373. 
   # It needs access to the vpnkit 9P coordination share 
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:1dcfbb69909086be663954809e92fa2d111fecf3
+    image: linuxkit/vpnkit-forwarder:9a2cb62b40426b271db8ba35dca538db05bc9220
     binds:
         - /var/vpnkit:/port
     net: host
     command: ["/vpnkit-forwarder", "-vsockPort", "62373"]
   # Monitor for image deletes and invoke a TRIM on the container filesystem
   - name: trim-after-delete
-    image: linuxkit/trim-after-delete:dc2b34b38193e6c4f6596f31075a9f6288ac7b09
+    image: linuxkit/trim-after-delete:b2001c6b4ffbba5b2d52e8d5cd5c97b9efed8898
   # When the host resumes from sleep, force a clock resync
   - name: host-timesync-daemon
-    image: linuxkit/host-timesync-daemon:562161a3a49a774ccfd5c9f3ba00d933d6f61876
+    image: linuxkit/host-timesync-daemon:6c8df91685b3f123d79214d55c515f90dbd954de
   # Run dockerd with the vpnkit userland proxy from the vpnkit-forwarder container.
   # Bind mounts /var/run to allow vsudd to connect to docker.sock, /var/vpnkit
   # for vpnkit coordination and /run/config/docker for the configuration file.
diff --git a/examples/docker.yml b/examples/docker.yml
index 64d752c1c..7748d8819 100644
--- a/examples/docker.yml
+++ b/examples/docker.yml
@@ -2,31 +2,31 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: ntpd
-    image: linuxkit/openntpd:dd353cac6cbd816008c565041cec6650090d0ad0
+    image: linuxkit/openntpd:4745ea9d3633469c860d1c3d5250303c3d96eec9
   - name: docker
     image: docker:20.10.6-dind
     capabilities:
diff --git a/examples/getty.yml b/examples/getty.yml
index 9b63ff429..2e05cbaab 100644
--- a/examples/getty.yml
+++ b/examples/getty.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     # to make insecure with passwordless root login, uncomment following lines
     #env:
     # - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/hostmount-writeable-overlay.yml b/examples/hostmount-writeable-overlay.yml
index 13242899c..0909b016d 100644
--- a/examples/hostmount-writeable-overlay.yml
+++ b/examples/hostmount-writeable-overlay.yml
@@ -2,15 +2,15 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 onshutdown:
   - name: shutdown
@@ -18,7 +18,7 @@ onshutdown:
     command: ["/bin/echo", "so long and thanks for all the fish"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
     runtime:
@@ -30,7 +30,7 @@ services:
           destination: writeable-host-etc
           options: ["rw", "lowerdir=/etc", "upperdir=/run/hostetc/upper", "workdir=/run/hostetc/work"]
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/influxdb-os.yml b/examples/influxdb-os.yml
index 4da379e6f..4c6c42311 100644
--- a/examples/influxdb-os.yml
+++ b/examples/influxdb-os.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: influxdb
diff --git a/examples/logging.yml b/examples/logging.yml
index abc406b0f..5aea703c0 100644
--- a/examples/logging.yml
+++ b/examples/logging.yml
@@ -3,21 +3,21 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
-  - linuxkit/memlogd:1a00c05fea660cf66b9f532c98f718ef63698cb5
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
+  - linuxkit/memlogd:50df5373d77ee7a7f121a0a83e7b20eee96a2492
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
 # Inside the getty type `/proc/1/root/usr/bin/logread -F` to follow the log
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
 # A service which generates log messages for testing
@@ -25,6 +25,6 @@ services:
     image: alpine:3.13
     command: ["/bin/sh", "-c", "while /bin/true; do echo hello $(date); sleep 1; done" ]
   - name: write-and-rotate-logs
-    image: linuxkit/logwrite:107c407b3443fb04eb0a6f69182653836c4e62f9
+    image: linuxkit/logwrite:de7ed802f84a3640e930a4a2fccf0b1ca2e25a00
   - name: kmsg
-    image: linuxkit/kmsg:ba81a0a3029b4bb7ee455f73892da9667397ca5b
+    image: linuxkit/kmsg:114cd10aba9f28530410f09cebee5777522b2f9e
diff --git a/examples/minimal.yml b/examples/minimal.yml
index 20718606e..522dd58f6 100644
--- a/examples/minimal.yml
+++ b/examples/minimal.yml
@@ -2,15 +2,15 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
diff --git a/examples/node_exporter.yml b/examples/node_exporter.yml
index 8ecdf3e05..6bd2b50c1 100644
--- a/examples/node_exporter.yml
+++ b/examples/node_exporter.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: node_exporter
-    image: linuxkit/node_exporter:9b46e0f911c91865bfd2237f37ba56cf3e8830ab
+    image: linuxkit/node_exporter:1a5015560e1839a6b37f53b47bbe0fbb3e93ed4a
diff --git a/examples/openstack.yml b/examples/openstack.yml
index 776b8d225..149f1ccf4 100644
--- a/examples/openstack.yml
+++ b/examples/openstack.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
     command: ["/usr/bin/metadata", "openstack"]
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/platform-aws.yml b/examples/platform-aws.yml
index ff78f591f..b4452b344 100644
--- a/examples/platform-aws.yml
+++ b/examples/platform-aws.yml
@@ -2,26 +2,26 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd2
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf"]
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/platform-azure.yml b/examples/platform-azure.yml
index 30187040b..89738747a 100644
--- a/examples/platform-azure.yml
+++ b/examples/platform-azure.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
       - /root/.ssh:/root/.ssh
 files:
diff --git a/examples/platform-gcp.yml b/examples/platform-gcp.yml
index 208addd2f..a41666a9b 100644
--- a/examples/platform-gcp.yml
+++ b/examples/platform-gcp.yml
@@ -2,27 +2,27 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/platform-hetzner.yml b/examples/platform-hetzner.yml
index bfe8e5955..fdabec16b 100644
--- a/examples/platform-hetzner.yml
+++ b/examples/platform-hetzner.yml
@@ -3,32 +3,32 @@ kernel:
   cmdline: console=ttyS1
   ucode: intel-ucode.cpio
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
-  - linuxkit/firmware:a17106a98940006529c714a3783eb03238c335a7
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
+  - linuxkit/firmware:a359a3bebe0022733af460ae71650a6aeaa52555
 onboot:
   - name: rngd1
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
     command: ["/sbin/rngd", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
     command: ["/usr/bin/metadata", "hetzner"]
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
       - /root/.ssh:/root/.ssh
 files:
diff --git a/examples/platform-packet.arm64.yml b/examples/platform-packet.arm64.yml
index 2a6cf6135..989ad6038 100644
--- a/examples/platform-packet.arm64.yml
+++ b/examples/platform-packet.arm64.yml
@@ -10,5 +10,5 @@ kernel:
   ucode: ""
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:ff76e806a0da0ea35f16951541cf3d24094b52c9
+    image: linuxkit/modprobe:57e99b39ad85e71fb7231aae07e311d26ac8c788
     command: ["modprobe", "nicvf"]
diff --git a/examples/platform-packet.yml b/examples/platform-packet.yml
index 76598183f..f6d0fb40e 100644
--- a/examples/platform-packet.yml
+++ b/examples/platform-packet.yml
@@ -3,32 +3,32 @@ kernel:
   cmdline: console=ttyS1
   ucode: intel-ucode.cpio
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
-  - linuxkit/firmware:a17106a98940006529c714a3783eb03238c335a7
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
+  - linuxkit/firmware:a359a3bebe0022733af460ae71650a6aeaa52555
 onboot:
   - name: rngd1
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
     command: ["/sbin/rngd", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
     command: ["/usr/bin/metadata", "packet"]
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
       - /root/.ssh:/root/.ssh
 files:
diff --git a/examples/platform-rt-for-vmware.yml b/examples/platform-rt-for-vmware.yml
index da190a699..14e0d775d 100644
--- a/examples/platform-rt-for-vmware.yml
+++ b/examples/platform-rt-for-vmware.yml
@@ -2,24 +2,24 @@ kernel:
   image: linuxkit/kernel:5.11.4-rt
   cmdline: "console=tty0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: open-vm-tools
-    image: linuxkit/open-vm-tools:ab851c74c42e7e17d95a64b169e396511f89b9c0
+    image: linuxkit/open-vm-tools:503e66e268a9764e763810c4d2514a27efbe44d3
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/platform-scaleway.yml b/examples/platform-scaleway.yml
index 7db06a6d7..ab51c3f90 100644
--- a/examples/platform-scaleway.yml
+++ b/examples/platform-scaleway.yml
@@ -2,25 +2,25 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0 root=/dev/vda"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: rngd1
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
     command: ["/sbin/rngd", "-1"]
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
diff --git a/examples/platform-vmware.yml b/examples/platform-vmware.yml
index 7f23f5557..0ea32068c 100644
--- a/examples/platform-vmware.yml
+++ b/examples/platform-vmware.yml
@@ -2,22 +2,22 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/examples/platform-vultr.yml b/examples/platform-vultr.yml
index c4b17da53..d4ac75325 100644
--- a/examples/platform-vultr.yml
+++ b/examples/platform-vultr.yml
@@ -2,28 +2,28 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
     command: ["/usr/bin/metadata", "vultr"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx
diff --git a/examples/redis-os.yml b/examples/redis-os.yml
index 11ecd1787..f06ee6578 100644
--- a/examples/redis-os.yml
+++ b/examples/redis-os.yml
@@ -4,16 +4,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   # Currently redis:4.0.6-alpine has trust issue with multi-arch
diff --git a/examples/sshd.yml b/examples/sshd.yml
index 55369b9b5..81ac56f61 100644
--- a/examples/sshd.yml
+++ b/examples/sshd.yml
@@ -2,27 +2,27 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: rngd1
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
     command: ["/sbin/rngd", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
       - /root/.ssh:/root/.ssh
 files:
diff --git a/examples/static-ip.yml b/examples/static-ip.yml
index 1842c8b13..f3a413820 100644
--- a/examples/static-ip.yml
+++ b/examples/static-ip.yml
@@ -2,18 +2,18 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: ip
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     binds:
      - /etc/ip:/etc/ip
     command: ["ip", "-b", "/etc/ip/eth0.conf"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
 files:     
diff --git a/examples/swap.yml b/examples/swap.yml
index 16235ebe0..5c47f2699 100644
--- a/examples/swap.yml
+++ b/examples/swap.yml
@@ -2,30 +2,30 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0 console=ttysclp0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/external"]
   - name: swap
-    image: linuxkit/swap:d17a7f1c26ff768c26b3c206ccf3aa72349568df
+    image: linuxkit/swap:ace4fd36355cd24cb8428122f46a2ae8a113d9ac
     # to use unencrypted swap, use:
     # command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
     command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
diff --git a/examples/tpm.yml b/examples/tpm.yml
index 632243e3f..945c49556 100644
--- a/examples/tpm.yml
+++ b/examples/tpm.yml
@@ -2,25 +2,25 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: tss
-    image: linuxkit/tss:1246031b0c9d408ceb81790a05dd37bcb9e1c4e1
+    image: linuxkit/tss:9700b821b163042a6d416680ebcd602ed0536a73
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/examples/vpnkit-forwarder.yml b/examples/vpnkit-forwarder.yml
index 740427f78..bc13f7d7e 100644
--- a/examples/vpnkit-forwarder.yml
+++ b/examples/vpnkit-forwarder.yml
@@ -2,12 +2,12 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: mount-vpnkit
     image: alpine:3.13
@@ -19,11 +19,11 @@ onboot:
     command: ["sh", "-c", "mkdir /host_var/vpnkit && mount -v -t 9p -o trans=virtio,dfltuid=1001,dfltgid=50,version=9p2000 port /host_var/vpnkit"]
 services:
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
     binds.add:
       - /root/.ssh:/root/.ssh
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:1dcfbb69909086be663954809e92fa2d111fecf3
+    image: linuxkit/vpnkit-forwarder:9a2cb62b40426b271db8ba35dca538db05bc9220
     binds:
         - /var/vpnkit:/port
     net: host
diff --git a/examples/vsudd-containerd.yml b/examples/vsudd-containerd.yml
index bfb89838c..95e4b3e4f 100644
--- a/examples/vsudd-containerd.yml
+++ b/examples/vsudd-containerd.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: vsudd
-    image: linuxkit/vsudd:5b962bdd22524b4edb7f428de745376abe359596
+    image: linuxkit/vsudd:f1ced526fee6df1ef2e46f87c503ef4a8fd48151
     binds:
         - /run/containerd/containerd.sock:/run/containerd/containerd.sock
     command: ["/vsudd",
diff --git a/examples/wireguard.yml b/examples/wireguard.yml
index 8433a17fa..631df58cc 100644
--- a/examples/wireguard.yml
+++ b/examples/wireguard.yml
@@ -2,18 +2,18 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: wg0
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -26,7 +26,7 @@ onboot:
       bindNS:
           net: /run/netns/wg0
   - name: wg1
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -40,12 +40,12 @@ onboot:
           net: /run/netns/wg1
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
     net: /run/netns/wg1
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: nginx
     image: nginx:1.13.8-alpine
     net: /run/netns/wg0
diff --git a/linuxkit.yml b/linuxkit.yml
index d91f8ebaf..349c48c9e 100644
--- a/linuxkit.yml
+++ b/linuxkit.yml
@@ -2,15 +2,15 @@ kernel:
   image: linuxkit/kernel:5.15.27
   cmdline: "console=tty0 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 onshutdown:
   - name: shutdown
@@ -18,11 +18,11 @@ onshutdown:
     command: ["/bin/echo", "so long and thanks for all the fish"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: nginx
     image: nginx:1.19.5-alpine
     capabilities:
diff --git a/pkg/acpid/Dockerfile b/pkg/acpid/Dockerfile
index 8ccb7ec76..4590d0feb 100644
--- a/pkg/acpid/Dockerfile
+++ b/pkg/acpid/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
@@ -6,7 +6,7 @@ RUN apk add --no-cache --initdb -p /out \
     busybox
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror2
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror2
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     acpid
diff --git a/pkg/auditd/Dockerfile b/pkg/auditd/Dockerfile
index 65e62df9d..f4c9c05f5 100644
--- a/pkg/auditd/Dockerfile
+++ b/pkg/auditd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --initdb -p /out alpine-baselayout apk-tools audit busybox tini
diff --git a/pkg/binfmt/Dockerfile b/pkg/binfmt/Dockerfile
index f120422bd..d2d73b493 100644
--- a/pkg/binfmt/Dockerfile
+++ b/pkg/binfmt/Dockerfile
@@ -9,7 +9,7 @@ RUN apt-get update && apt-get install -y qemu-user-static && \
     mv /usr/bin/qemu-loongarch64-static /usr/bin/qemu-loongarch64 && \
     rm /usr/bin/qemu-*-static
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev
 ENV GOPATH=/go PATH=$PATH:/go/bin
diff --git a/pkg/bpftrace/Dockerfile b/pkg/bpftrace/Dockerfile
index 8f8e5eddf..7e9665318 100644
--- a/pkg/bpftrace/Dockerfile
+++ b/pkg/bpftrace/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --update \
     bison \
     build-base \
diff --git a/pkg/ca-certificates/Dockerfile b/pkg/ca-certificates/Dockerfile
index 99e30538e..6c061dd74 100644
--- a/pkg/ca-certificates/Dockerfile
+++ b/pkg/ca-certificates/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as alpine
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as alpine
 
 RUN apk add ca-certificates
 
diff --git a/pkg/cadvisor/Dockerfile b/pkg/cadvisor/Dockerfile
index 76de85e60..507a3710a 100644
--- a/pkg/cadvisor/Dockerfile
+++ b/pkg/cadvisor/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as build
 
 RUN apk add --no-cache bash go git musl-dev linux-headers make patch
 # Hack to work around an issue with go on arm64 requiring gcc
@@ -21,7 +21,7 @@ RUN mkdir -p /go/src/${GITBASE} \
     && mv cadvisor /usr/bin/
 
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/containerd/Dockerfile b/pkg/containerd/Dockerfile
index 5a0b95731..5a3ecc72b 100644
--- a/pkg/containerd/Dockerfile
+++ b/pkg/containerd/Dockerfile
@@ -1,10 +1,10 @@
 # Dockerfile to build linuxkit/containerd for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as alpine
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as alpine
 
 RUN apk add tzdata binutils
 RUN mkdir -p /etc/init.d && ln -s /usr/bin/service /etc/init.d/020-containerd
 
-FROM linuxkit/containerd-dev:ee5755eb38c0a6b6aef2658b757652d82556c30c as containerd-dev
+FROM linuxkit/containerd-dev:c70d27ded9b10ac53abf68e8dcc2d5e4a26006a1 as containerd-dev
 
 FROM scratch
 ENTRYPOINT []
diff --git a/pkg/dhcpcd/Dockerfile b/pkg/dhcpcd/Dockerfile
index fc232eeea..b61a5ce96 100644
--- a/pkg/dhcpcd/Dockerfile
+++ b/pkg/dhcpcd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/pkg/dm-crypt/Dockerfile b/pkg/dm-crypt/Dockerfile
index d4f7057b1..2763d45e9 100644
--- a/pkg/dm-crypt/Dockerfile
+++ b/pkg/dm-crypt/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out  \
     alpine-baselayout \
diff --git a/pkg/dummy/Dockerfile b/pkg/dummy/Dockerfile
index ae3680d12..d547b9f76 100644
--- a/pkg/dummy/Dockerfile
+++ b/pkg/dummy/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --no-cache --initdb make
 
 FROM scratch
diff --git a/pkg/extend/Dockerfile b/pkg/extend/Dockerfile
index 73eb700cc..17cab3e17 100644
--- a/pkg/extend/Dockerfile
+++ b/pkg/extend/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
@@ -15,7 +15,7 @@ RUN apk add --no-cache --initdb -p /out \
     && true
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev
 ENV GOPATH=/go PATH=$PATH:/go/bin
diff --git a/pkg/firmware-all/Dockerfile b/pkg/firmware-all/Dockerfile
index 4b229da65..7fbb651fa 100644
--- a/pkg/firmware-all/Dockerfile
+++ b/pkg/firmware-all/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --no-cache git
 
 # Make sure you also update the FW_COMMIT in ../firmware/Dockerfile
diff --git a/pkg/firmware/Dockerfile b/pkg/firmware/Dockerfile
index 3ebeee3ed..945a14c35 100644
--- a/pkg/firmware/Dockerfile
+++ b/pkg/firmware/Dockerfile
@@ -1,7 +1,7 @@
 # Make modules from a recentish kernel available
 FROM linuxkit/kernel:5.4.28 AS kernel
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --no-cache git kmod
 
 # Clone the firmware repository
diff --git a/pkg/format/Dockerfile b/pkg/format/Dockerfile
index 2aa334d8a..d2974b9c6 100644
--- a/pkg/format/Dockerfile
+++ b/pkg/format/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
@@ -15,7 +15,7 @@ RUN apk add --no-cache --initdb -p /out \
     && true
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev
 ENV GOPATH=/go PATH=$PATH:/go/bin
diff --git a/pkg/getty/Dockerfile b/pkg/getty/Dockerfile
index fc2e5e28d..989af4f55 100644
--- a/pkg/getty/Dockerfile
+++ b/pkg/getty/Dockerfile
@@ -1,5 +1,5 @@
 # Dockerfile to build linuxkit/getty for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/host-timesync-daemon/Dockerfile b/pkg/host-timesync-daemon/Dockerfile
index e472be7ad..a4fd78348 100644
--- a/pkg/host-timesync-daemon/Dockerfile
+++ b/pkg/host-timesync-daemon/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev git
 ENV GOPATH=/go PATH=$PATH:/go/bin
diff --git a/pkg/init/Dockerfile b/pkg/init/Dockerfile
index c82f07606..6a787443d 100644
--- a/pkg/init/Dockerfile
+++ b/pkg/init/Dockerfile
@@ -1,6 +1,6 @@
 # Dockerfile to build linuxkit/init for linuxkit
-FROM linuxkit/containerd-dev:ee5755eb38c0a6b6aef2658b757652d82556c30c AS containerd-dev
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/containerd-dev:c70d27ded9b10ac53abf68e8dcc2d5e4a26006a1 AS containerd-dev
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --no-cache --initdb alpine-baselayout make gcc musl-dev git linux-headers
 
 ADD usermode-helper.c ./
@@ -24,7 +24,7 @@ COPY --from=containerd-dev /go/src/github.com/containerd/containerd $GOPATH/src/
 RUN cd /go/src/cmd/service && ./skanky-vendor.sh $GOPATH/src/github.com/containerd/containerd
 RUN go-compile.sh /go/src/cmd/service
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out alpine-baselayout busybox musl
 
diff --git a/pkg/ip/Dockerfile b/pkg/ip/Dockerfile
index 4e3ad78cb..2f524aba6 100644
--- a/pkg/ip/Dockerfile
+++ b/pkg/ip/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add curl
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/kmsg/Dockerfile b/pkg/kmsg/Dockerfile
index 378751479..19adac47c 100644
--- a/pkg/kmsg/Dockerfile
+++ b/pkg/kmsg/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev linux-headers
 ARG GOPKGVERSION
diff --git a/pkg/logwrite/Dockerfile b/pkg/logwrite/Dockerfile
index e5cb9b460..da3535c22 100644
--- a/pkg/logwrite/Dockerfile
+++ b/pkg/logwrite/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev
 ARG GOPKGVERSION
diff --git a/pkg/losetup/Dockerfile b/pkg/losetup/Dockerfile
index cb08a27b0..a05d1c7e7 100644
--- a/pkg/losetup/Dockerfile
+++ b/pkg/losetup/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out  \
     alpine-baselayout \
diff --git a/pkg/memlogd/Dockerfile b/pkg/memlogd/Dockerfile
index 0bf770855..876733495 100644
--- a/pkg/memlogd/Dockerfile
+++ b/pkg/memlogd/Dockerfile
@@ -1,5 +1,5 @@
 # Dockerfile to build linuxkit/memlogd for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev
 ARG GOPKGVERSION
diff --git a/pkg/metadata/Dockerfile b/pkg/metadata/Dockerfile
index 928c68b4e..bdd139d19 100644
--- a/pkg/metadata/Dockerfile
+++ b/pkg/metadata/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev linux-headers
 ARG GOPKGVERSION
diff --git a/pkg/mkimage/Dockerfile b/pkg/mkimage/Dockerfile
index d5e277e52..19a3b4d6f 100644
--- a/pkg/mkimage/Dockerfile
+++ b/pkg/mkimage/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/modprobe/Dockerfile b/pkg/modprobe/Dockerfile
index 06cf029f5..abd6b6d01 100644
--- a/pkg/modprobe/Dockerfile
+++ b/pkg/modprobe/Dockerfile
@@ -1,5 +1,5 @@
 # Dockerfile to build linuxkit/modprobe for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/mount/Dockerfile b/pkg/mount/Dockerfile
index f1ccf3326..9207c907e 100644
--- a/pkg/mount/Dockerfile
+++ b/pkg/mount/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
@@ -9,7 +9,7 @@ RUN apk add --no-cache --initdb -p /out \
     && true
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev
 ARG GOPKGVERSION
diff --git a/pkg/node_exporter/Dockerfile b/pkg/node_exporter/Dockerfile
index b8a6e9a00..a96c32acd 100644
--- a/pkg/node_exporter/Dockerfile
+++ b/pkg/node_exporter/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as build
 
 RUN apk add --no-cache go git musl-dev make curl gcc
 
diff --git a/pkg/open-vm-tools/Dockerfile b/pkg/open-vm-tools/Dockerfile
index c597ad343..09d939d87 100644
--- a/pkg/open-vm-tools/Dockerfile
+++ b/pkg/open-vm-tools/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/pkg/openntpd/Dockerfile b/pkg/openntpd/Dockerfile
index 1666d8eac..e500f0b9b 100644
--- a/pkg/openntpd/Dockerfile
+++ b/pkg/openntpd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/poweroff/Dockerfile b/pkg/poweroff/Dockerfile
index 5906884bd..817343b6b 100644
--- a/pkg/poweroff/Dockerfile
+++ b/pkg/poweroff/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out alpine-baselayout busybox musl
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
diff --git a/pkg/qemu-ga/Dockerfile b/pkg/qemu-ga/Dockerfile
index 480283f18..5cb3f6058 100644
--- a/pkg/qemu-ga/Dockerfile
+++ b/pkg/qemu-ga/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN mkdir -p /out/var/run
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/rngd/Dockerfile b/pkg/rngd/Dockerfile
index 47bac9fae..679a21f00 100644
--- a/pkg/rngd/Dockerfile
+++ b/pkg/rngd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go gcc musl-dev linux-headers
 ARG GOPKGVERSION
diff --git a/pkg/runc/Dockerfile b/pkg/runc/Dockerfile
index 08e35073b..5d71e4734 100644
--- a/pkg/runc/Dockerfile
+++ b/pkg/runc/Dockerfile
@@ -1,5 +1,5 @@
 # Dockerfile to build linuxkit/runc for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as alpine
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as alpine
 RUN \
   apk add \
   bash \
diff --git a/pkg/sshd/Dockerfile b/pkg/sshd/Dockerfile
index 969432b06..89ff0a595 100644
--- a/pkg/sshd/Dockerfile
+++ b/pkg/sshd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/swap/Dockerfile b/pkg/swap/Dockerfile
index f6b57d9f9..087891328 100644
--- a/pkg/swap/Dockerfile
+++ b/pkg/swap/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/pkg/sysctl/Dockerfile b/pkg/sysctl/Dockerfile
index e91d28275..595c985ce 100644
--- a/pkg/sysctl/Dockerfile
+++ b/pkg/sysctl/Dockerfile
@@ -1,5 +1,5 @@
 # Dockerfile to build linuxkit/sysctl for linuxkit
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev
 ARG GOPKGVERSION
diff --git a/pkg/sysfs/Dockerfile b/pkg/sysfs/Dockerfile
index b08f2a8b7..54d9db4e1 100644
--- a/pkg/sysfs/Dockerfile
+++ b/pkg/sysfs/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev
 ARG GOPKGVERSION
diff --git a/pkg/trim-after-delete/Dockerfile b/pkg/trim-after-delete/Dockerfile
index 2d8188977..74d8b9e3e 100644
--- a/pkg/trim-after-delete/Dockerfile
+++ b/pkg/trim-after-delete/Dockerfile
@@ -1,5 +1,5 @@
 # We need the `fstrim` binary:
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/pkg/tss/Dockerfile b/pkg/tss/Dockerfile
index c29cddfb4..d807a94a8 100644
--- a/pkg/tss/Dockerfile
+++ b/pkg/tss/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 ENV TROUSERS_COMMIT 94144b0a1dcef6e31845d6c319e9bd7357208eb9
 ENV TPM_TOOLS_COMMIT bf43837575c5f7d31865562dce7778eae970052e
diff --git a/pkg/vpnkit-expose-port/Dockerfile b/pkg/vpnkit-expose-port/Dockerfile
index 547d8ee57..2ddf96cb0 100644
--- a/pkg/vpnkit-expose-port/Dockerfile
+++ b/pkg/vpnkit-expose-port/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev git build-base
 ENV GOPATH=/go PATH=$PATH:/go/bin GO111MODULE=off
diff --git a/pkg/vpnkit-forwarder/Dockerfile b/pkg/vpnkit-forwarder/Dockerfile
index 7b7efff8b..043f8a610 100644
--- a/pkg/vpnkit-forwarder/Dockerfile
+++ b/pkg/vpnkit-forwarder/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev git build-base
 ENV GOPATH=/go PATH=$PATH:/go/bin GO111MODULE=off
diff --git a/pkg/vsudd/Dockerfile b/pkg/vsudd/Dockerfile
index 483e8b349..e3264bb19 100644
--- a/pkg/vsudd/Dockerfile
+++ b/pkg/vsudd/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN apk add --no-cache go musl-dev git build-base
 ENV GOPATH=/go PATH=$PATH:/go/bin GO111MODULE=off
diff --git a/projects/clear-containers/clear-containers.yml b/projects/clear-containers/clear-containers.yml
index 7512f52cd..4d580ec93 100644
--- a/projects/clear-containers/clear-containers.yml
+++ b/projects/clear-containers/clear-containers.yml
@@ -2,7 +2,7 @@ kernel:
   image: linuxkit/kernel-clear-containers:4.9.x
   cmdline: "root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro rw rootfstype=ext4 tsc=reliable no_timer_check rcupdate.rcu_expedited=1 i8042.direct=1 i8042.dumbkbd=1 i8042.nopnp=1 i8042.noaux=1 noreplace-smp reboot=k panic=1 console=hvc0 console=hvc1 initcall_debug iommu=off quiet  cryptomgr.notests page_poison=on"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
 onboot:
   - name: sysctl
     image: mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c
diff --git a/projects/compose/compose-dynamic.yml b/projects/compose/compose-dynamic.yml
index f0754b0d5..dd3b14494 100644
--- a/projects/compose/compose-dynamic.yml
+++ b/projects/compose/compose-dynamic.yml
@@ -2,32 +2,32 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: ntpd
-    image: linuxkit/openntpd:dd353cac6cbd816008c565041cec6650090d0ad0
+    image: linuxkit/openntpd:4745ea9d3633469c860d1c3d5250303c3d96eec9
   - name: docker
     image: docker:20.10.6-dind
     capabilities:
diff --git a/projects/compose/compose-static.yml b/projects/compose/compose-static.yml
index 39da306ad..cc721da40 100644
--- a/projects/compose/compose-static.yml
+++ b/projects/compose/compose-static.yml
@@ -2,32 +2,32 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: ntpd
-    image: linuxkit/openntpd:dd353cac6cbd816008c565041cec6650090d0ad0
+    image: linuxkit/openntpd:4745ea9d3633469c860d1c3d5250303c3d96eec9
   - name: docker
     image: docker:20.10.6-dind
     capabilities:
diff --git a/projects/ima-namespace/ima-namespace.yml b/projects/ima-namespace/ima-namespace.yml
index 65e931f59..bce096a44 100644
--- a/projects/ima-namespace/ima-namespace.yml
+++ b/projects/ima-namespace/ima-namespace.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel-ima:4.11.1-186dd3605ee7b23214850142f8f02b4679dbd148
   cmdline: "console=ttyS0 console=tty0 page_poison=1 ima_appraise=enforce_ns"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
   - linuxkit/ima-utils:dfeb3896fd29308b80ff9ba7fe5b8b767e40ca29
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/projects/landlock/landlock.yml b/projects/landlock/landlock.yml
index f7cfadb25..4f9dee52c 100644
--- a/projects/landlock/landlock.yml
+++ b/projects/landlock/landlock.yml
@@ -2,7 +2,7 @@ kernel:
   image: mobylinux/kernel-landlock:4.9.x
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
   - mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
   - mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b
   - mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
diff --git a/projects/memorizer/memorizer.yml b/projects/memorizer/memorizer.yml
index efeec0767..ad92e785d 100644
--- a/projects/memorizer/memorizer.yml
+++ b/projects/memorizer/memorizer.yml
@@ -2,16 +2,16 @@ kernel:
   image: "linuxkitprojects/kernel-memorizer:4.10_dbg"
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
 trust:
diff --git a/projects/miragesdk/examples/fdd.yml b/projects/miragesdk/examples/fdd.yml
index c808b928f..430e5163c 100644
--- a/projects/miragesdk/examples/fdd.yml
+++ b/projects/miragesdk/examples/fdd.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkit/kernel:4.9.34
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
   - samoht/fdd
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
 files:
   - path: etc/init.d/020-fdd-init
     mode: "0700"
diff --git a/projects/miragesdk/examples/mirage-dhcp.yml b/projects/miragesdk/examples/mirage-dhcp.yml
index 7c409fd62..ec72ffbc5 100644
--- a/projects/miragesdk/examples/mirage-dhcp.yml
+++ b/projects/miragesdk/examples/mirage-dhcp.yml
@@ -2,12 +2,12 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcp-client
     image: miragesdk/dhcp-client:22aa9d527820534295a8cd59901c0c5197af6585
     net: host
@@ -28,9 +28,9 @@ onboot:
      - /lib:/lib     # for ifconfig
 services:
   - name: sshd
-    image: linuxkit/sshd:62036c2a279715d05e8298b9269a0659964f2619
+    image: linuxkit/sshd:3d3847cf029b1b600b97011f78aa015315b2cb78
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
 files:
diff --git a/projects/okernel/examples/okernel_simple.yaml b/projects/okernel/examples/okernel_simple.yaml
index 1f766daff..4fc76f19f 100644
--- a/projects/okernel/examples/okernel_simple.yaml
+++ b/projects/okernel/examples/okernel_simple.yaml
@@ -2,18 +2,18 @@ kernel:
   image: okernel:latest
   cmdline: "console=tty0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
 services:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
 trust:
diff --git a/projects/shiftfs/shiftfs.yml b/projects/shiftfs/shiftfs.yml
index fc736c646..eaeb650ae 100644
--- a/projects/shiftfs/shiftfs.yml
+++ b/projects/shiftfs/shiftfs.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkitprojects/kernel-shiftfs:4.11.4-881a041fc14bd95814cf140b5e98d97dd65160b5
   cmdline: "console=ttyS0 console=tty0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:
diff --git a/src/cmd/linuxkit/moby/images.yaml b/src/cmd/linuxkit/moby/images.yaml
index 022dd0cf4..e8c10329c 100644
--- a/src/cmd/linuxkit/moby/images.yaml
+++ b/src/cmd/linuxkit/moby/images.yaml
@@ -1,13 +1,13 @@
- iso:            linuxkit/mkimage-iso:1f6fdf0ee860caf13c06a6f3f2d89413de78881e
- iso-bios:       linuxkit/mkimage-iso-bios:314c06ec0d72f12057c9e8d5fdf790df02dbc8c2
- iso-efi:        linuxkit/mkimage-iso-efi:55b72b55ffea82d1c254c0ff5cb65df0c2c04528
- iso-efi-initrd: linuxkit/mkimage-iso-efi-initrd:f7fba1acaee8afbea2771717c9faf758d0a66a87
- raw-bios:       linuxkit/mkimage-raw-bios:6185592a62b860b01491d7f1661e79f62e6fc902
- raw-efi:        linuxkit/mkimage-raw-efi:6a8d9ebf4f7883839e00034c1516527452c564d3
- squashfs:       linuxkit/mkimage-squashfs:92dbcfe5ef69dc93276403b09a9f892f25654ed7
+ iso:            linuxkit/mkimage-iso:e5433bd4e8cdccd3205112065806bdc2dc729c46
+ iso-bios:       linuxkit/mkimage-iso-bios:9f10b30a8c4bda814300cffd10ea815d577f41ea
+ iso-efi:        linuxkit/mkimage-iso-efi:87f7ecfd12b39500ecb5bd2dc32fc9a3933c187e
+ iso-efi-initrd: linuxkit/mkimage-iso-efi-initrd:ddf89fad92a04f9671e7f200e0b2c5ce61dbe6cb
+ raw-bios:       linuxkit/mkimage-raw-bios:fa43e378bb78b390452fbd06463c956748e34019
+ raw-efi:        linuxkit/mkimage-raw-efi:044c30d142c14af827380f9c6126567844761819
+ squashfs:       linuxkit/mkimage-squashfs:e75c2d21ffc76a9d3b5e6d667b4eaf3ea52eda32
  gcp:            linuxkit/mkimage-gcp:035c2c2b4b958060c0b6bdd41d9cbc886a335098
- qcow2-efi:      linuxkit/mkimage-qcow2-efi:19cb758d47c07169bc4772a7576e28d56740b004
+ qcow2-efi:      linuxkit/mkimage-qcow2-efi:2a12a970a090824f4151ee2b325014aa890329a3
  vhd:            linuxkit/mkimage-vhd:91bcc7a6475f46a3d5d84cf6161f07c583dd9c21
  dynamic-vhd:    linuxkit/mkimage-dynamic-vhd:b755f8ff82c8631d18decaebb09867e7b88c2533
  vmdk:           linuxkit/mkimage-vmdk:20a370a55bd8d58c2ae9d634c297a955bb006efd
- rpi3:           linuxkit/mkimage-rpi3:d76bb890e1d55c2d9395e0ca58523ee076571c21
+ rpi3:           linuxkit/mkimage-rpi3:4de9c144e4766bf283620371601c91638164b686
diff --git a/src/cmd/linuxkit/moby/mkimage.yaml b/src/cmd/linuxkit/moby/mkimage.yaml
index 265283244..71797b24e 100644
--- a/src/cmd/linuxkit/moby/mkimage.yaml
+++ b/src/cmd/linuxkit/moby/mkimage.yaml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:4.9.39
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: mkimage
-    image: linuxkit/mkimage:43a37c8c98dfb4cdf9639223fa1baacf305eb5e7
+    image: linuxkit/mkimage:ef9d1414c7c451a600d01ea12d1b5de36202fb13
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
 trust:
   org:
     - linuxkit
diff --git a/test/cases/000_build/000_formats/test.yml b/test/cases/000_build/000_formats/test.yml
index 4ab377f8f..7b36ab656 100644
--- a/test/cases/000_build/000_formats/test.yml
+++ b/test/cases/000_build/000_formats/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
diff --git a/test/cases/000_build/010_reproducible/test.yml b/test/cases/000_build/010_reproducible/test.yml
index f063bd0d0..4cd6d81af 100644
--- a/test/cases/000_build/010_reproducible/test.yml
+++ b/test/cases/000_build/010_reproducible/test.yml
@@ -3,13 +3,13 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
     # Add some random unsorted caps
     capabilities:
@@ -18,7 +18,7 @@ onboot:
 
 services:
   - name: testservice
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     # Some environments
     env:
       - BENV=true
diff --git a/test/cases/000_build/020_binds/test.yml b/test/cases/000_build/020_binds/test.yml
index fdf69b1c5..0ac1c6912 100644
--- a/test/cases/000_build/020_binds/test.yml
+++ b/test/cases/000_build/020_binds/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.4.30
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     binds.add:
       - /check.sh:/check.sh
       - /var/tmp:/var/tmp
@@ -16,7 +16,7 @@ onboot:
     # - /:/hostroot
     command: ["sh", "-c", "/check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/000_build/050_sbom/test.yml b/test/cases/000_build/050_sbom/test.yml
index e678c94f4..2397ece38 100644
--- a/test/cases/000_build/050_sbom/test.yml
+++ b/test/cases/000_build/050_sbom/test.yml
@@ -3,9 +3,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 
 onboot:
   - name: package1
diff --git a/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml b/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
index 6d04f7755..74c5c7227 100644
--- a/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
+++ b/test/cases/010_platforms/000_qemu/000_run_kernel+initrd/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml b/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
index 6d04f7755..74c5c7227 100644
--- a/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
+++ b/test/cases/010_platforms/000_qemu/005_run_kernel+squashfs/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/010_run_iso/test.yml b/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
index 2c7f4efc4..67e66c9f8 100644
--- a/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
+++ b/test/cases/010_platforms/000_qemu/010_run_iso/test.yml
@@ -2,10 +2,10 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 
diff --git a/test/cases/010_platforms/000_qemu/020_run_efi/test.yml b/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
+++ b/test/cases/010_platforms/000_qemu/020_run_efi/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml b/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/030_run_qcow_bios/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml b/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
+++ b/test/cases/010_platforms/000_qemu/040_run_raw_bios/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/050_run_aws/test.yml b/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
+++ b/test/cases/010_platforms/000_qemu/050_run_aws/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/000_qemu/100_container/test.yml b/test/cases/010_platforms/000_qemu/100_container/test.yml
index f1eead63d..6c56a7440 100644
--- a/test/cases/010_platforms/000_qemu/100_container/test.yml
+++ b/test/cases/010_platforms/000_qemu/100_container/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml b/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/000_run_kernel+initrd/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml b/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/005_run_kernel+squashfs/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml b/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
index cd3a692a4..334c25fc6 100644
--- a/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
+++ b/test/cases/010_platforms/010_hyperkit/010_acpi/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 services:
   - name: acpid
-    image: linuxkit/acpid:548f8f1c8bda31cdbefb65bdb0747f97c17639d2
+    image: linuxkit/acpid:c9d5ab81d3312602f3b17b266be9c60127e8f5ec
diff --git a/test/cases/010_platforms/110_gcp/000_run/test.yml b/test/cases/010_platforms/110_gcp/000_run/test.yml
index 982eeb855..60437097f 100644
--- a/test/cases/010_platforms/110_gcp/000_run/test.yml
+++ b/test/cases/010_platforms/110_gcp/000_run/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/020_kernel/011_config_5.4.x/test.yml b/test/cases/020_kernel/011_config_5.4.x/test.yml
index 32d750226..74329697f 100644
--- a/test/cases/020_kernel/011_config_5.4.x/test.yml
+++ b/test/cases/020_kernel/011_config_5.4.x/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.4.172
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check-kernel-config
-    image: linuxkit/test-kernel-config:6f722f5b4f25152e7cf465df79ae6b2aefd3a007
+    image: linuxkit/test-kernel-config:8e5406d070b5ac05e624134e0a4f810078626c16
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/013_config_5.10.x/test.yml b/test/cases/020_kernel/013_config_5.10.x/test.yml
index 54a8ace7d..a87f524ff 100644
--- a/test/cases/020_kernel/013_config_5.10.x/test.yml
+++ b/test/cases/020_kernel/013_config_5.10.x/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check-kernel-config
-    image: linuxkit/test-kernel-config:6f722f5b4f25152e7cf465df79ae6b2aefd3a007
+    image: linuxkit/test-kernel-config:8e5406d070b5ac05e624134e0a4f810078626c16
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/016_config_5.15.x/test.yml b/test/cases/020_kernel/016_config_5.15.x/test.yml
index c57a6da01..3124e7815 100644
--- a/test/cases/020_kernel/016_config_5.15.x/test.yml
+++ b/test/cases/020_kernel/016_config_5.15.x/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.15.27
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check-kernel-config
-    image: linuxkit/test-kernel-config:6f722f5b4f25152e7cf465df79ae6b2aefd3a007
+    image: linuxkit/test-kernel-config:8e5406d070b5ac05e624134e0a4f810078626c16
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/111_kmod_5.4.x/test.yml b/test/cases/020_kernel/111_kmod_5.4.x/test.yml
index f2a9bb908..20921447e 100644
--- a/test/cases/020_kernel/111_kmod_5.4.x/test.yml
+++ b/test/cases/020_kernel/111_kmod_5.4.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.4.172
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check
     image: kmod-test
@@ -13,5 +13,5 @@ onboot:
     capabilities:
      - all
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/113_kmod_5.10.x/test.yml b/test/cases/020_kernel/113_kmod_5.10.x/test.yml
index 45badf7f7..b212d20b9 100644
--- a/test/cases/020_kernel/113_kmod_5.10.x/test.yml
+++ b/test/cases/020_kernel/113_kmod_5.10.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check
     image: kmod-test
@@ -13,5 +13,5 @@ onboot:
     capabilities:
      - all
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/116_kmod_5.15.x/test.yml b/test/cases/020_kernel/116_kmod_5.15.x/test.yml
index fc43d5d77..49bd84570 100644
--- a/test/cases/020_kernel/116_kmod_5.15.x/test.yml
+++ b/test/cases/020_kernel/116_kmod_5.15.x/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.15.27
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: check
     image: kmod-test
@@ -13,5 +13,5 @@ onboot:
     capabilities:
      - all
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single-reverse/test.yml
index a74f43dae..c5f265281 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single/test.yml
index 9bd93b722..8396e6492 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/010_echo-tcp-ipv4-short-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single-reverse/test.yml
index 4c351856e..537aedb6a 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single/test.yml
index 4c351856e..537aedb6a 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/011_echo-tcp-ipv4-short-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi-reverse/test.yml
index ddc0fec16..5494d8303 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi/test.yml
index ddc0fec16..5494d8303 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/012_echo-tcp-ipv4-short-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single-reverse/test.yml
index f275b63b3..f85fa52ff 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single/test.yml
index b7e757f9c..4d70956f3 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/015_echo-tcp-ipv4-long-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single-reverse/test.yml
index d9b2668f6..c0a015c6a 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single/test.yml
index d9b2668f6..c0a015c6a 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/016_echo-tcp-ipv4-long-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi-reverse/test.yml
index f4ec8559d..949882264 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi/test.yml
index f4ec8559d..949882264 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/017_echo-tcp-ipv4-long-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "tcp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single-reverse/test.yml
index 3426f94a5..230cc4150 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single/test.yml
index cb1092360..72293efc7 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/020_echo-tcp-ipv6-short-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single-reverse/test.yml
index 9366dc9cb..44e3a3923 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single/test.yml
index 9366dc9cb..44e3a3923 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/021_echo-tcp-ipv6-short-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi-reverse/test.yml
index 11a318034..35573b5d9 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi/test.yml
index 11a318034..35573b5d9 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/022_echo-tcp-ipv6-short-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single-reverse/test.yml
index 0ad2295d4..7097741c9 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single/test.yml
index b4090a2ef..f35ad94a8 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/025_echo-tcp-ipv6-long-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single-reverse/test.yml
index 3ad4e0342..cf122e1b5 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single/test.yml
index 3ad4e0342..cf122e1b5 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/026_echo-tcp-ipv6-long-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi-reverse/test.yml
index 32a1bdc27..917ea876e 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi/test.yml
index 32a1bdc27..917ea876e 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/027_echo-tcp-ipv6-long-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "tcp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single-reverse/test.yml
index bfb0bca48..e7a2cae25 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single/test.yml
index 540425d83..e3c7ad661 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/030_echo-udp-ipv4-short-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single-reverse/test.yml
index 50eecc4b8..11264a6cc 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single/test.yml
index 50eecc4b8..11264a6cc 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/031_echo-udp-ipv4-short-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi-reverse/test.yml
index 82ba7c81c..9572ddcef 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi/test.yml
index 82ba7c81c..9572ddcef 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/032_echo-udp-ipv4-short-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single-reverse/test.yml
index 31be43013..bfa771026 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single/test.yml
index dee6345f9..585c86797 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/035_echo-udp-ipv4-long-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single-reverse/test.yml
index 9cb12e24d..3339f250c 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single/test.yml
index 9cb12e24d..3339f250c 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/036_echo-udp-ipv4-long-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi-reverse/test.yml
index a5f6fc276..30273efd7 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi/test.yml
index a5f6fc276..30273efd7 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/037_echo-udp-ipv4-long-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "4", "-p", "udp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single-reverse/test.yml
index c0b403694..ef23c852f 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single/test.yml
index be7760023..f76223cce 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/040_echo-udp-ipv6-short-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single-reverse/test.yml
index 755a4f89c..b301ab8f6 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single/test.yml
index 755a4f89c..b301ab8f6 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/041_echo-udp-ipv6-short-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi-reverse/test.yml
index 26e784bfc..074ff0b5b 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi/test.yml
index 26e784bfc..074ff0b5b 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/042_echo-udp-ipv6-short-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single-reverse/test.yml
index 024983a78..77fbdbf4a 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single/test.yml
index d20a363aa..69af52c54 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/045_echo-udp-ipv6-long-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single-reverse/test.yml
index a195617ee..3024c92aa 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single/test.yml b/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single/test.yml
index a195617ee..3024c92aa 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/046_echo-udp-ipv6-long-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi-reverse/test.yml
index 4bc7caafd..0f741a8f9 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi/test.yml
index 4bc7caafd..0f741a8f9 100644
--- a/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/010_veth/047_echo-udp-ipv6-long-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-ip", "6", "-p", "udp", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single-reverse/test.yml
index 051aebe47..33d3a0d5d 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single/test.yml
index ca1da5041..da6266836 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/010_echo-short-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single-reverse/test.yml
index 34eba8e7d..27d9a0bd1 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single/test.yml
index 34eba8e7d..27d9a0bd1 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/011_echo-short-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi-reverse/test.yml
index 44a293b32..056e004bf 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi/test.yml
index 44a293b32..056e004bf 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/012_echo-short-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-p", "unix", "-s", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single-reverse/test.yml
index 90da1713c..38c0444c8 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-c", "1", "-r"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single/test.yml
index d2ca1b7e3..37bad9500 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/015_echo-long-1con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-c", "1"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single-reverse/test.yml
index 92e78e15d..0d8023e1c 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single/test.yml
index 92e78e15d..0d8023e1c 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/016_echo-long-10con-single/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "1", "-l", "5", "-i", "15", "-p", "unix", "-c", "10"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi-reverse/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi-reverse/test.yml
index 6fad66503..e9e83267a 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-p", "unix", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi/test.yml b/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi/test.yml
index 6fad66503..e9e83267a 100644
--- a/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi/test.yml
+++ b/test/cases/020_kernel/200_namespace/050_unix-domain/017_echo-long-5con-multi/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "5", "-l", "5", "-i", "15", "-p", "unix", "-c", "5"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/010_veth-unix-domain-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/010_veth-unix-domain-echo/test.yml
index 982c8f2e5..e251cbd5b 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/010_veth-unix-domain-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/010_veth-unix-domain-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/011_veth-unix-domain-echo-reverse/test.yml b/test/cases/020_kernel/200_namespace/100_mix/011_veth-unix-domain-echo-reverse/test.yml
index b30cdc153..2852e7540 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/011_veth-unix-domain-echo-reverse/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/011_veth-unix-domain-echo-reverse/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-reverse"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/012_veth-ipv4-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/012_veth-ipv4-echo/test.yml
index 35b5d089a..58ab01a43 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/012_veth-ipv4-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/012_veth-ipv4-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-ipv4"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/013_veth-ipv6-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/013_veth-ipv6-echo/test.yml
index 77a66c448..0f55c24a4 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/013_veth-ipv6-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/013_veth-ipv6-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-ipv6"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/014_veth-tcp-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/014_veth-tcp-echo/test.yml
index c51a8ab04..9638797e0 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/014_veth-tcp-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/014_veth-tcp-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-tcp"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/015_veth-udp-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/015_veth-udp-echo/test.yml
index 192bf5d02..d8de7ec46 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/015_veth-udp-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/015_veth-udp-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-udp"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/100_mix/020_unix-domain-echo/test.yml b/test/cases/020_kernel/200_namespace/100_mix/020_unix-domain-echo/test.yml
index 1673570d7..2a1690d93 100644
--- a/test/cases/020_kernel/200_namespace/100_mix/020_unix-domain-echo/test.yml
+++ b/test/cases/020_kernel/200_namespace/100_mix/020_unix-domain-echo/test.yml
@@ -1,10 +1,10 @@
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-unix"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/cases/020_kernel/200_namespace/common.yml b/test/cases/020_kernel/200_namespace/common.yml
index b69d6c8ed..6ee4c3e19 100644
--- a/test/cases/020_kernel/200_namespace/common.yml
+++ b/test/cases/020_kernel/200_namespace/common.yml
@@ -2,5 +2,5 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
diff --git a/test/cases/030_security/000_docker-bench/test.yml b/test/cases/030_security/000_docker-bench/test.yml
index ec91a9ba5..f8e2c95a5 100644
--- a/test/cases/030_security/000_docker-bench/test.yml
+++ b/test/cases/030_security/000_docker-bench/test.yml
@@ -2,25 +2,25 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: sysfs
-    image: linuxkit/sysfs:5fd982d39ff7bec8e480c67a110acb2d3794c291
+    image: linuxkit/sysfs:e2476b26d551cd75b032990545a304c2cfbd1084
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:310c16ec5315bd07d4b8f5332cfa7dc5cbc7d368
+    image: linuxkit/rngd:e35c1c671a9d35dbc42b83b620563ce472f8effb
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
   - name: docker
     image: docker:20.10.6-dind
     capabilities:
@@ -34,7 +34,7 @@ services:
      - /run:/var/run
     command: ["/usr/local/bin/docker-init", "/usr/local/bin/dockerd"]
   - name: test-docker-bench
-    image: linuxkit/test-docker-bench:3b801c257ab3736361bbfb7c4c8ae3ddcfc797f7
+    image: linuxkit/test-docker-bench:c8e8145eecff09f69f85e6784680f2ff82c51935
     ipc: host
     pid: host
     net: host
diff --git a/test/cases/030_security/010_ports/test.yml b/test/cases/030_security/010_ports/test.yml
index 834aabf0c..edbfcbd1e 100644
--- a/test/cases/030_security/010_ports/test.yml
+++ b/test/cases/030_security/010_ports/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: test
     image: alpine:3.13
@@ -12,7 +12,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/001_dummy/test.yml b/test/cases/040_packages/001_dummy/test.yml
index e9582e070..2f840104f 100644
--- a/test/cases/040_packages/001_dummy/test.yml
+++ b/test/cases/040_packages/001_dummy/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dummy
-    image: linuxkit/dummy:b3004c5c8ecf05f8a315bef99078fe0a6deffcea
+    image: linuxkit/dummy:6b913f24a284f891a9657c4b22c1b4f4003efc73
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/040_packages/002_bcc/test.yml b/test/cases/040_packages/002_bcc/test.yml
index cf98a6ec7..4a5307bc6 100644
--- a/test/cases/040_packages/002_bcc/test.yml
+++ b/test/cases/040_packages/002_bcc/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
   - linuxkit/kernel-bcc:5.4.113
 onboot:
   - name: check-bcc
@@ -17,7 +17,7 @@ onboot:
     capabilities:
       - all
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/002_binfmt/test.yml b/test/cases/040_packages/002_binfmt/test.yml
index 2106e449d..e659bcc17 100644
--- a/test/cases/040_packages/002_binfmt/test.yml
+++ b/test/cases/040_packages/002_binfmt/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: binfmt
-    image: linuxkit/binfmt:8960cf2852ef5dccd8cb0746d8ba48ce4fe4651d
+    image: linuxkit/binfmt:312ed1cb899fae229b5303ac6c0510ac58f331c8
   - name: test
     image: alpine:3.13
     binds:
@@ -14,7 +14,7 @@ onboot:
       - /proc/sys/fs/binfmt_misc:/binfmt_misc
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/002_bpftrace/test.yml b/test/cases/040_packages/002_bpftrace/test.yml
index f43a933fc..095903fbb 100644
--- a/test/cases/040_packages/002_bpftrace/test.yml
+++ b/test/cases/040_packages/002_bpftrace/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/bpftrace:aa3c430a9998399875e6cf3511e38fd3ab07cc5f
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/bpftrace:07ef5c6b7044adff8937d24e8ae8835bed1e0c65
 onboot:
   - name: bpftrace-test
     image: alpine:3.13
@@ -17,7 +17,7 @@ onboot:
     capabilities:
       - all
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/003_ca-certificates/test.yml b/test/cases/040_packages/003_ca-certificates/test.yml
index 28e711512..7bd6c73dd 100644
--- a/test/cases/040_packages/003_ca-certificates/test.yml
+++ b/test/cases/040_packages/003_ca-certificates/test.yml
@@ -2,9 +2,9 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: test
     image: alpine:3.13
@@ -13,7 +13,7 @@ onboot:
       - /etc:/host-etc
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/003_cgroupv2/test.yml b/test/cases/040_packages/003_cgroupv2/test.yml
index 2bc5f8156..197ed528c 100644
--- a/test/cases/040_packages/003_cgroupv2/test.yml
+++ b/test/cases/040_packages/003_cgroupv2/test.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "linuxkit.unified_cgroup_hierarchy=1 console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: test
     image: alpine:3.13
@@ -15,7 +15,7 @@ onboot:
       - /run:/run
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/003_containerd/test.yml b/test/cases/040_packages/003_containerd/test.yml
index 5e7ee8298..aad8ecf1a 100644
--- a/test/cases/040_packages/003_containerd/test.yml
+++ b/test/cases/040_packages/003_containerd/test.yml
@@ -2,22 +2,22 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib"]
   - name: test
-    image: linuxkit/test-containerd:95300ba5dac0d934ccca3e028450a645e67489da
+    image: linuxkit/test-containerd:32ec3ec67d9c1963f497c71c2e3cd2a466c9f424
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
diff --git a/test/cases/040_packages/004_dhcpcd/test.yml b/test/cases/040_packages/004_dhcpcd/test.yml
index 8c849c4dd..1cf3da5dd 100644
--- a/test/cases/040_packages/004_dhcpcd/test.yml
+++ b/test/cases/040_packages/004_dhcpcd/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: test
     image: alpine:3.13
@@ -15,7 +15,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/004_dm-crypt/000_simple/test.yml b/test/cases/040_packages/004_dm-crypt/000_simple/test.yml
index d8319d8de..5e1f530e0 100644
--- a/test/cases/040_packages/004_dm-crypt/000_simple/test.yml
+++ b/test/cases/040_packages/004_dm-crypt/000_simple/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dm-crypt
-    image: linuxkit/dm-crypt:526d32351c8246431be8e1a168cb514ff3c365af
+    image: linuxkit/dm-crypt:501dade7be942e9203b6d640cc21ea5f975ded99
     command: ["/usr/bin/crypto", "it_is_encrypted", "/dev/sda"]
   - name: test
     image: alpine:3.13
@@ -16,7 +16,7 @@ onboot:
       - /dev:/dev
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/004_dm-crypt/001_luks/test.yml b/test/cases/040_packages/004_dm-crypt/001_luks/test.yml
index 7578b07d1..119b2feb1 100644
--- a/test/cases/040_packages/004_dm-crypt/001_luks/test.yml
+++ b/test/cases/040_packages/004_dm-crypt/001_luks/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dm-crypt
-    image: linuxkit/dm-crypt:526d32351c8246431be8e1a168cb514ff3c365af
+    image: linuxkit/dm-crypt:501dade7be942e9203b6d640cc21ea5f975ded99
     command: ["/usr/bin/crypto", "-l", "it_is_encrypted", "/dev/sda"]
   - name: test
     image: alpine:3.13
@@ -16,7 +16,7 @@ onboot:
       - /dev:/dev
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/004_dm-crypt/002_key/test.yml b/test/cases/040_packages/004_dm-crypt/002_key/test.yml
index 245e15a1a..a76a2379f 100644
--- a/test/cases/040_packages/004_dm-crypt/002_key/test.yml
+++ b/test/cases/040_packages/004_dm-crypt/002_key/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: dm-crypt
-    image: linuxkit/dm-crypt:526d32351c8246431be8e1a168cb514ff3c365af
+    image: linuxkit/dm-crypt:501dade7be942e9203b6d640cc21ea5f975ded99
     command: ["/usr/bin/crypto", "-k", "/some/other/enc_key", "it_is_encrypted", "/dev/sda"]
     binds:
       - /dev/:/dev
@@ -19,7 +19,7 @@ onboot:
       - /dev:/dev
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/005_extend/000_ext4/test-create.yml b/test/cases/040_packages/005_extend/000_ext4/test-create.yml
index 5ea701ed3..51a75b510 100644
--- a/test/cases/040_packages/005_extend/000_ext4/test-create.yml
+++ b/test/cases/040_packages/005_extend/000_ext4/test-create.yml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -16,5 +16,5 @@ onboot:
       - /var/lib/docker:/var/lib/docker
     command: ["touch", "/var/lib/docker/bar"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/040_packages/005_extend/000_ext4/test.yml b/test/cases/040_packages/005_extend/000_ext4/test.yml
index cb12b0f7c..141bfc89e 100644
--- a/test/cases/040_packages/005_extend/000_ext4/test.yml
+++ b/test/cases/040_packages/005_extend/000_ext4/test.yml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: extend
-    image: linuxkit/extend:aa486645c16e6465015970722bf6c9c19534d97e
+    image: linuxkit/extend:fc13ad59861ab47f59fb93aee39469c03cac88bb
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -17,7 +17,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/005_extend/001_btrfs/test-create.yml b/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
index ecc6390ea..6e0e0308a 100644
--- a/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
+++ b/test/cases/040_packages/005_extend/001_btrfs/test-create.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:ff76e806a0da0ea35f16951541cf3d24094b52c9
+    image: linuxkit/modprobe:57e99b39ad85e71fb7231aae07e311d26ac8c788
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -20,5 +20,5 @@ onboot:
       - /var/lib/docker:/var/lib/docker
     command: ["touch", "/var/lib/docker/bar"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/040_packages/005_extend/001_btrfs/test.yml b/test/cases/040_packages/005_extend/001_btrfs/test.yml
index 94ddd7fd2..e40a2a8f0 100644
--- a/test/cases/040_packages/005_extend/001_btrfs/test.yml
+++ b/test/cases/040_packages/005_extend/001_btrfs/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:ff76e806a0da0ea35f16951541cf3d24094b52c9
+    image: linuxkit/modprobe:57e99b39ad85e71fb7231aae07e311d26ac8c788
     command: ["modprobe", "btrfs"]
   - name: extend
-    image: linuxkit/extend:aa486645c16e6465015970722bf6c9c19534d97e
+    image: linuxkit/extend:fc13ad59861ab47f59fb93aee39469c03cac88bb
     command: ["/usr/bin/extend", "-type", "btrfs"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -21,7 +21,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/005_extend/002_xfs/README.md b/test/cases/040_packages/005_extend/002_xfs/README.md
new file mode 100644
index 000000000..0a4b13c5b
--- /dev/null
+++ b/test/cases/040_packages/005_extend/002_xfs/README.md
@@ -0,0 +1,10 @@
+# xfs tests
+
+XFS packages - xfsprogs - is generally forward compatible but not backwards compatible.
+This means that a more recent version of xfsprogs will not work with an older
+kernel.
+
+To avoid this issue, do not update these tests unless you are also updating the
+kernel.
+
+This can be made simpler by having kernel-specific versions.
diff --git a/test/cases/040_packages/005_extend/002_xfs/test-create.yml b/test/cases/040_packages/005_extend/002_xfs/test-create.yml
index 51004d36d..d678d6608 100644
--- a/test/cases/040_packages/005_extend/002_xfs/test-create.yml
+++ b/test/cases/040_packages/005_extend/002_xfs/test-create.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
     image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
     command: ["/usr/bin/format", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -17,5 +17,5 @@ onboot:
       - /var/lib/docker:/var/lib/docker
     command: ["touch", "/var/lib/docker/bar"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/040_packages/005_extend/002_xfs/test.yml b/test/cases/040_packages/005_extend/002_xfs/test.yml
index 47ebb06b4..16736e5d2 100644
--- a/test/cases/040_packages/005_extend/002_xfs/test.yml
+++ b/test/cases/040_packages/005_extend/002_xfs/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: extend
-    image: linuxkit/extend:aa486645c16e6465015970722bf6c9c19534d97e
+    image: linuxkit/extend:fc13ad59861ab47f59fb93aee39469c03cac88bb
     command: ["/usr/bin/extend", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/005_extend/003_gpt/test-create.yml b/test/cases/040_packages/005_extend/003_gpt/test-create.yml
index a8df54038..9af309eda 100644
--- a/test/cases/040_packages/005_extend/003_gpt/test-create.yml
+++ b/test/cases/040_packages/005_extend/003_gpt/test-create.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-partition", "gpt"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -17,5 +17,5 @@ onboot:
       - /var/lib/docker:/var/lib/docker
     command: ["touch", "/var/lib/docker/bar"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
diff --git a/test/cases/040_packages/005_extend/003_gpt/test.yml b/test/cases/040_packages/005_extend/003_gpt/test.yml
index cb12b0f7c..141bfc89e 100644
--- a/test/cases/040_packages/005_extend/003_gpt/test.yml
+++ b/test/cases/040_packages/005_extend/003_gpt/test.yml
@@ -2,13 +2,13 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: extend
-    image: linuxkit/extend:aa486645c16e6465015970722bf6c9c19534d97e
+    image: linuxkit/extend:fc13ad59861ab47f59fb93aee39469c03cac88bb
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -17,7 +17,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/000_auto/test.yml b/test/cases/040_packages/006_format_mount/000_auto/test.yml
index 9fdb78b1b..6479c383a 100644
--- a/test/cases/040_packages/006_format_mount/000_auto/test.yml
+++ b/test/cases/040_packages/006_format_mount/000_auto/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/001_by_label/test.yml b/test/cases/040_packages/006_format_mount/001_by_label/test.yml
index 8dc83c91a..cafd31e50 100644
--- a/test/cases/040_packages/006_format_mount/001_by_label/test.yml
+++ b/test/cases/040_packages/006_format_mount/001_by_label/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-label", "docker"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in b/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
index 252fb142d..a65faff59 100644
--- a/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
+++ b/test/cases/040_packages/006_format_mount/002_by_name/test.yml.in
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "@DEVICE@"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "-device", "@DEVICE@1", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/003_btrfs/test.yml b/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
index 17838593a..f8cd62864 100644
--- a/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
+++ b/test/cases/040_packages/006_format_mount/003_btrfs/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:ff76e806a0da0ea35f16951541cf3d24094b52c9
+    image: linuxkit/modprobe:57e99b39ad85e71fb7231aae07e311d26ac8c788
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -21,7 +21,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/004_xfs/test.yml b/test/cases/040_packages/006_format_mount/004_xfs/test.yml
index ba1b264d9..3a591f1b6 100644
--- a/test/cases/040_packages/006_format_mount/004_xfs/test.yml
+++ b/test/cases/040_packages/006_format_mount/004_xfs/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
     image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
     command: ["/usr/bin/format", "-type", "xfs" ]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml b/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
index e28a733f7..dda4dff55 100644
--- a/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
+++ b/test/cases/040_packages/006_format_mount/005_by_device_force/test.yml
@@ -2,23 +2,23 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sda"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sdb"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-verbose", "-type", "xfs", "/dev/sda"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-verbose", "-force", "-type", "xfs", "/dev/sdb"]
   - name: test
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     binds:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
@@ -26,7 +26,7 @@ onboot:
       - CAP_SYS_ADMIN
       - CAP_MKNOD
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/006_gpt/test.yml b/test/cases/040_packages/006_format_mount/006_gpt/test.yml
index 63b191365..588c56e56 100644
--- a/test/cases/040_packages/006_format_mount/006_gpt/test.yml
+++ b/test/cases/040_packages/006_format_mount/006_gpt/test.yml
@@ -2,14 +2,14 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-partition", "gpt"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.13
@@ -18,7 +18,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/010_multiple/test.yml b/test/cases/040_packages/006_format_mount/010_multiple/test.yml
index 546f15bb4..618bde6ed 100644
--- a/test/cases/040_packages/006_format_mount/010_multiple/test.yml
+++ b/test/cases/040_packages/006_format_mount/010_multiple/test.yml
@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-label", "docker"]
   - name: format
-    image: linuxkit/format:5161fe240e5824da04d51bcf5e00afcb0c18dc25
+    image: linuxkit/format:4686064ce75f8014a3cdf8c3227887a81a74180a
     command: ["/usr/bin/format", "-label", "foo"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: mount
-    image: linuxkit/mount:f671cb94a8999a65e33b3fe79f3def58e3d58b07
+    image: linuxkit/mount:e3f4f07c424c1aff42a3b2009fb701540e313056
     command: ["/usr/bin/mountie", "-label", "foo", "/var/foo"]
   - name: test
     image: alpine:3.13
@@ -25,7 +25,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/006_format_mount/README.md b/test/cases/040_packages/006_format_mount/README.md
new file mode 100644
index 000000000..0a4b13c5b
--- /dev/null
+++ b/test/cases/040_packages/006_format_mount/README.md
@@ -0,0 +1,10 @@
+# xfs tests
+
+XFS packages - xfsprogs - is generally forward compatible but not backwards compatible.
+This means that a more recent version of xfsprogs will not work with an older
+kernel.
+
+To avoid this issue, do not update these tests unless you are also updating the
+kernel.
+
+This can be made simpler by having kernel-specific versions.
diff --git a/test/cases/040_packages/007_getty-containerd/test.yml b/test/cases/040_packages/007_getty-containerd/test.yml
index cfce18368..9eff30900 100644
--- a/test/cases/040_packages/007_getty-containerd/test.yml
+++ b/test/cases/040_packages/007_getty-containerd/test.yml
@@ -2,17 +2,17 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:e74e6cad132403d1a6d6cd25b136a7c69c99f3f7
+    image: linuxkit/getty:9b8e6b510b49da196a1e412aa95f364e3dd16576
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)
diff --git a/test/cases/040_packages/009_init_containerd/test.yml b/test/cases/040_packages/009_init_containerd/test.yml
index b92adddf1..1aaa1d0c4 100644
--- a/test/cases/040_packages/009_init_containerd/test.yml
+++ b/test/cases/040_packages/009_init_containerd/test.yml
@@ -2,10 +2,10 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 services:
   - name: test
     image: alpine:3.13
diff --git a/test/cases/040_packages/011_kmsg/test.yml b/test/cases/040_packages/011_kmsg/test.yml
index 95a3d51dc..1dc77b4f5 100644
--- a/test/cases/040_packages/011_kmsg/test.yml
+++ b/test/cases/040_packages/011_kmsg/test.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
-  - linuxkit/memlogd:1a00c05fea660cf66b9f532c98f718ef63698cb5
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
+  - linuxkit/memlogd:50df5373d77ee7a7f121a0a83e7b20eee96a2492
 services:
   - name: kmsg
-    image: linuxkit/kmsg:ba81a0a3029b4bb7ee455f73892da9667397ca5b
+    image: linuxkit/kmsg:114cd10aba9f28530410f09cebee5777522b2f9e
   - name: write-and-rotate-logs
-    image: linuxkit/logwrite:107c407b3443fb04eb0a6f69182653836c4e62f9
+    image: linuxkit/logwrite:de7ed802f84a3640e930a4a2fccf0b1ca2e25a00
   - name: check-the-logs
     image: alpine:3.13
     binds:
diff --git a/test/cases/040_packages/012_logwrite/test.yml b/test/cases/040_packages/012_logwrite/test.yml
index a94a7b41a..6fce3185a 100644
--- a/test/cases/040_packages/012_logwrite/test.yml
+++ b/test/cases/040_packages/012_logwrite/test.yml
@@ -2,18 +2,18 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
-  - linuxkit/memlogd:1a00c05fea660cf66b9f532c98f718ef63698cb5
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
+  - linuxkit/memlogd:50df5373d77ee7a7f121a0a83e7b20eee96a2492
 services:
 # A service which generates logs of log messages
   - name: fill-the-logs
     image: alpine
     command: ["/bin/sh", "-c", "while /bin/true; do echo hello $(date); done" ]
   - name: write-and-rotate-logs
-    image: linuxkit/logwrite:107c407b3443fb04eb0a6f69182653836c4e62f9
+    image: linuxkit/logwrite:de7ed802f84a3640e930a4a2fccf0b1ca2e25a00
     command: ["/usr/bin/logwrite", "-max-log-size", "1024"]
   - name: check-the-logs
     image: alpine:3.13
diff --git a/test/cases/040_packages/012_losetup/test.yml b/test/cases/040_packages/012_losetup/test.yml
index bfc11bf88..b6f5dbc67 100644
--- a/test/cases/040_packages/012_losetup/test.yml
+++ b/test/cases/040_packages/012_losetup/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: losetup
-    image: linuxkit/losetup:fcee8e453684d45c3c411fe8c28ecb2210158638
+    image: linuxkit/losetup:bcee190708d1612203309435bcef8a2d0b982d92
     command: ["/usr/bin/loopy", "-c", "/var/test.img"]
   - name: test
     image: alpine:3.13
@@ -20,7 +20,7 @@ onboot:
         type: b
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/013_metadata/000_cidata/test.yml b/test/cases/040_packages/013_metadata/000_cidata/test.yml
index 972dd9cda..2bb062ef5 100644
--- a/test/cases/040_packages/013_metadata/000_cidata/test.yml
+++ b/test/cases/040_packages/013_metadata/000_cidata/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: metadata
-    image: linuxkit/metadata:501144d47215671e77b9cac44748a04f21236195
+    image: linuxkit/metadata:420ead0d86604a6dc138c393914d419b68e50e04
     command: ["/usr/bin/metadata", "-v"]    
   - name: test
     image: alpine:3.13
@@ -15,7 +15,7 @@ onboot:
       - /run:/run
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/013_mkimage/mkimage.yml b/test/cases/040_packages/013_mkimage/mkimage.yml
index 1cceceea3..2cadfb7a7 100644
--- a/test/cases/040_packages/013_mkimage/mkimage.yml
+++ b/test/cases/040_packages/013_mkimage/mkimage.yml
@@ -2,10 +2,10 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: mkimage
-    image: linuxkit/mkimage:43a37c8c98dfb4cdf9639223fa1baacf305eb5e7
+    image: linuxkit/mkimage:ef9d1414c7c451a600d01ea12d1b5de36202fb13
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
diff --git a/test/cases/040_packages/013_mkimage/run.yml b/test/cases/040_packages/013_mkimage/run.yml
index 26a81fc24..329725432 100644
--- a/test/cases/040_packages/013_mkimage/run.yml
+++ b/test/cases/040_packages/013_mkimage/run.yml
@@ -2,8 +2,8 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
diff --git a/test/cases/040_packages/019_sysctl/test.yml b/test/cases/040_packages/019_sysctl/test.yml
index 7edfe2c0e..4ea8f1cb6 100644
--- a/test/cases/040_packages/019_sysctl/test.yml
+++ b/test/cases/040_packages/019_sysctl/test.yml
@@ -2,11 +2,11 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:c6f23919b8610c7645a89a89f863c6209bc84bee
+    image: linuxkit/sysctl:f8a06fea01bfcb322e913213e22d35790168ed01
   - name: test
     image: alpine:3.13
     net: host
@@ -16,7 +16,7 @@ onboot:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "10"]
 files:
   - path: check.sh
diff --git a/test/cases/040_packages/023_wireguard/test.yml b/test/cases/040_packages/023_wireguard/test.yml
index b0c4b41d4..a0801050c 100644
--- a/test/cases/040_packages/023_wireguard/test.yml
+++ b/test/cases/040_packages/023_wireguard/test.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0 console=ttyAMA0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
-  - linuxkit/ca-certificates:4de36e93dc87f7ccebd20db616ed10d381911d32
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
+  - linuxkit/ca-certificates:6003d7e78387f1fbb35bf1d1af300120be97f94b
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: wg0
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -24,7 +24,7 @@ onboot:
       bindNS:
           net: /run/netns/wg0
   - name: wg1
-    image: linuxkit/ip:c88e3272e3b12edec454e4720da8bb70a7655bc7
+    image: linuxkit/ip:bc8772ad4a77269d131a7baeb77d867ef7ab3c9f
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
diff --git a/test/hack/test-ltp.yml b/test/hack/test-ltp.yml
index c03118806..057081594 100644
--- a/test/hack/test-ltp.yml
+++ b/test/hack/test-ltp.yml
@@ -2,16 +2,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: ltp
     image: linuxkit/test-ltp:0967388fb338867dddd3c1a72470a1a7cec5a0dd
     binds:
      - /etc/ltp/baseline:/etc/ltp/baseline
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
 files:
   - path: /etc/ltp/baseline
     contents: "100"
diff --git a/test/hack/test.yml b/test/hack/test.yml
index 393b8a4d8..ab15e6eff 100644
--- a/test/hack/test.yml
+++ b/test/hack/test.yml
@@ -4,15 +4,15 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
-  - linuxkit/containerd:95d5f0d2d8dc63bd87e96b7b39cf026cb86125c9
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
+  - linuxkit/containerd:0dab9a4e2b9aa7f034873881a08890fd40b2755d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:2a8ed08fea442909ba10f950d458191ed3647115
+    image: linuxkit/dhcpcd:a58543e8b40a29b3cd0c5d1e42ce21b71a8abcef
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: check-kernel-config
-    image: linuxkit/test-kernel-config:6f722f5b4f25152e7cf465df79ae6b2aefd3a007
+    image: linuxkit/test-kernel-config:8e5406d070b5ac05e624134e0a4f810078626c16
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "120"]
diff --git a/test/pkg/containerd/Dockerfile b/test/pkg/containerd/Dockerfile
index 29b71e88b..b888dab6d 100644
--- a/test/pkg/containerd/Dockerfile
+++ b/test/pkg/containerd/Dockerfile
@@ -1,5 +1,5 @@
-FROM linuxkit/containerd-dev:ee5755eb38c0a6b6aef2658b757652d82556c30c as containerd-dev
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/containerd-dev:c70d27ded9b10ac53abf68e8dcc2d5e4a26006a1 as containerd-dev
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 # btrfs-progfs is required for btrfs test (mkfs.btrfs)
 # util-linux is required for btrfs test (losetup)
diff --git a/test/pkg/docker-bench/Dockerfile b/test/pkg/docker-bench/Dockerfile
index ab1e8610c..d48adfae1 100644
--- a/test/pkg/docker-bench/Dockerfile
+++ b/test/pkg/docker-bench/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/test/pkg/kernel-config/Dockerfile b/test/pkg/kernel-config/Dockerfile
index 03e013340..75b3415c4 100644
--- a/test/pkg/kernel-config/Dockerfile
+++ b/test/pkg/kernel-config/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out alpine-baselayout busybox musl bash
diff --git a/test/pkg/ns/Dockerfile b/test/pkg/ns/Dockerfile
index 3c4a50aa6..f0240ca74 100644
--- a/test/pkg/ns/Dockerfile
+++ b/test/pkg/ns/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
@@ -8,7 +8,7 @@ RUN apk add --no-cache --initdb -p /out \
     musl
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 RUN apk add --no-cache \
     build-base \
     git \
diff --git a/test/pkg/ns/template.yml b/test/pkg/ns/template.yml
index 496974129..20e2bad0d 100644
--- a/test/pkg/ns/template.yml
+++ b/test/pkg/ns/template.yml
@@ -3,16 +3,16 @@ kernel:
   image: linuxkit/kernel:5.10.104
   cmdline: "console=ttyS0"
 init:
-  - linuxkit/init:07d37c3ae7fad5ddcb54c8dc65774ae050851f04
-  - linuxkit/runc:2aabf16bc8a1b94e015ee53fa2e7a77ab1883a80
+  - linuxkit/init:817099ace2d56ea2d20c7702ab8e1a8abc7d89fd
+  - linuxkit/runc:59c40661f2174ca6752d73086b91d63eeb98d021
 onboot:
   - name: test-ns
-    image: linuxkit/test-ns:bd163e189ce4985a798aa422c5509ef44e031756
+    image: linuxkit/test-ns:1a7c8ae79394b6c569cbb34b848e310554186330
     command: ["/bin/sh", "/runp-runc-net.sh", "mix-unix"]
     # command: ["/bin/sh", "/runc-net.sh", "-l", "5", "-i", "2", "-c", "5", "-p", "unix", "-ip", "6"]
     mounts: # for runc
     - type: cgroup
       options: ["rw"]
   - name: poweroff
-    image: linuxkit/poweroff:992d9c7531166fe071d945e8b2728d8b61eb8d5a
+    image: linuxkit/poweroff:58b9a79e2ee74b435b2f015dcbe3e6a16cc827e5
     command: ["/bin/sh", "/poweroff.sh", "3"]
diff --git a/test/pkg/virtsock/Dockerfile b/test/pkg/virtsock/Dockerfile
index db9a90c7e..76830c23f 100644
--- a/test/pkg/virtsock/Dockerfile
+++ b/test/pkg/virtsock/Dockerfile
@@ -1,10 +1,10 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     tini
 RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS build
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS build
 
 RUN apk add --no-cache go musl-dev git make
 ENV GOPATH=/go PATH=$PATH:/go/bin GO111MODULE=off
diff --git a/tools/alpine/Dockerfile b/tools/alpine/Dockerfile
index d3712ffd8..18e5ce9e1 100644
--- a/tools/alpine/Dockerfile
+++ b/tools/alpine/Dockerfile
@@ -1,4 +1,5 @@
-FROM alpine:3.17 AS mirror
+ARG ALPINE_VERSION=3.19
+FROM alpine:${ALPINE_VERSION} AS mirror
 
 # update base image
 RUN apk update && apk upgrade -a
@@ -55,7 +56,7 @@ RUN set -e && \
         cp iucode_tool /iucode_tool; \
     fi
 
-FROM alpine:3.17
+FROM alpine:${ALPINE_VERSION}
 
 ARG TARGETARCH
 
diff --git a/tools/alpine/packages b/tools/alpine/packages
index 5ea84fdb7..41f4c0056 100644
--- a/tools/alpine/packages
+++ b/tools/alpine/packages
@@ -10,6 +10,8 @@ autoconf
 automake
 bash
 bc
+bcc
+bcc-dev
 binutils
 binutils-dev
 bison
@@ -130,5 +132,6 @@ xorriso
 xz
 xz-dev
 zfs
+zip
 zlib-dev
 zlib-static
diff --git a/tools/alpine/versions.aarch64 b/tools/alpine/versions.aarch64
index 38ecedfb6..b0c40edc0 100644
--- a/tools/alpine/versions.aarch64
+++ b/tools/alpine/versions.aarch64
@@ -1,387 +1,427 @@
-# linuxkit/alpine:1e9d030f156213bf857e32cb824e86a834e29d5f-arm64
+# linuxkit/alpine:38d956b2d8924c69d569ee46dd702d6ecb108284-arm64
 # automatically generated list of installed packages
-abuild-3.10.0-r0
-acpid-2.0.34-r0
-acpid-openrc-2.0.34-r0
-agetty-2.38.1-r0
-agetty-openrc-0.45.2-r7
-alpine-baselayout-3.4.0-r0
-alpine-baselayout-data-3.4.0-r0
+abuild-3.12.0-r0
+acpid-2.0.34-r3
+acpid-openrc-2.0.34-r3
+agetty-2.39.3-r0
+agetty-openrc-0.52.1-r2
+alpine-baselayout-3.4.3-r2
+alpine-baselayout-data-3.4.3-r2
 alpine-keys-2.4-r1
-apk-tools-2.12.10-r1
-argon2-libs-20190702-r2
-argp-standalone-1.5.0-r0
-attr-2.5.1-r2
-attr-dev-2.5.1-r2
-audit-3.0.9-r0
-audit-libs-3.0.9-r0
-audit-openrc-3.0.9-r0
-autoconf-2.71-r1
-automake-1.16.5-r1
-bash-5.2.15-r0
-bc-1.07.1-r2
-binutils-2.39-r2
-binutils-dev-2.39-r2
-binutils-gold-2.39-r2
-bison-3.8.2-r0
-blkid-2.38.1-r0
-bridge-utils-1.7.1-r1
-brotli-libs-1.0.9-r9
-bsd-compat-headers-0.7.2-r3
-btrfs-progs-6.0.2-r0
-btrfs-progs-dev-6.0.2-r0
-btrfs-progs-libs-6.0.2-r0
+apk-tools-2.14.0-r5
+argon2-libs-20190702-r5
+argp-standalone-1.5.0-r1
+attr-2.5.1-r5
+attr-dev-2.5.1-r5
+audit-3.1.2-r1
+audit-libs-3.1.2-r1
+audit-openrc-3.1.2-r1
+autoconf-2.71-r2
+automake-1.16.5-r2
+bash-5.2.21-r0
+bc-1.07.1-r4
+bcc-0.28.0-r1
+bcc-dev-0.28.0-r1
+binutils-2.41-r0
+binutils-dev-2.41-r0
+binutils-gold-2.41-r0
+bison-3.8.2-r1
+blkid-2.39.3-r0
+bridge-utils-1.7.1-r2
+brotli-libs-1.1.0-r1
+bsd-compat-headers-0.7.2-r5
+btrfs-progs-6.6.2-r0
+btrfs-progs-dev-6.6.2-r0
+btrfs-progs-libs-6.6.2-r0
+btrfs-progs-openrc-6.6.2-r0
 build-base-0.5-r3
-busybox-1.35.0-r29
-busybox-binsh-1.35.0-r29
-bzip2-1.0.8-r4
-ca-certificates-20220614-r3
-ca-certificates-bundle-20220614-r3
-capstone-4.0.2-r4
-cdrkit-1.1.11-r4
-cfdisk-2.38.1-r0
-cifs-utils-7.0-r0
-clang15-15.0.6-r0
-clang15-dev-15.0.6-r0
-clang15-extra-tools-15.0.6-r0
-clang15-libclang-15.0.6-r0
-clang15-libs-15.0.6-r0
-clang15-static-15.0.6-r0
-cmake-3.24.3-r0
-coreutils-9.1-r0
-cryptsetup-2.5.0-r2
-cryptsetup-libs-2.5.0-r2
-cryptsetup-openrc-2.5.0-r2
-curl-7.87.0-r0
-dbus-libs-1.14.4-r0
-device-mapper-2.03.17-r1
-device-mapper-event-libs-2.03.17-r1
-device-mapper-libs-2.03.17-r1
-device-mapper-udev-2.03.17-r1
-dhcpcd-9.4.1-r1
-dhcpcd-openrc-9.4.1-r1
-diffutils-3.8-r1
-dosfstools-4.2-r1
-dtc-1.6.1-r2
-e2fsprogs-1.46.5-r4
-e2fsprogs-dev-1.46.5-r4
-e2fsprogs-extra-1.46.5-r4
-e2fsprogs-libs-1.46.5-r4
-elfutils-dev-0.187-r2
-ethtool-6.0-r0
-eudev-3.2.11-r4
-eudev-libs-3.2.11-r4
-eudev-openrc-3.2.11-r4
-expect-5.45.4-r3
-fakeroot-1.29-r0
-file-5.43-r0
-findmnt-2.38.1-r0
-findutils-4.9.0-r2
-flex-2.6.4-r3
-flex-dev-2.6.4-r3
-flex-libs-2.6.4-r3
-flock-2.38.1-r0
-fortify-headers-1.1-r1
-fstrim-2.38.1-r0
-g++-12.2.1_git20220924-r4
-gawk-5.1.1-r1
-gc-8.2.2-r0
-gcc-12.2.1_git20220924-r4
-gdbm-1.23-r0
-gettext-0.21.1-r1
-gettext-asprintf-0.21.1-r1
-gettext-dev-0.21.1-r1
-gettext-libs-0.21.1-r1
-git-2.38.2-r0
-git-perl-2.38.2-r0
-glib-2.74.4-r0
-gmp-6.2.1-r2
-gmp-dev-6.2.1-r2
-gnupg-2.2.40-r0
-gnupg-dirmngr-2.2.40-r0
-gnupg-gpgconf-2.2.40-r0
-gnupg-utils-2.2.40-r0
-gnupg-wks-client-2.2.40-r0
-gnutls-3.7.8-r2
-go-1.19.4-r0
-gpg-2.2.40-r0
-gpg-agent-2.2.40-r0
-gpg-wks-server-2.2.40-r0
-gpgsm-2.2.40-r0
-gpgv-2.2.40-r0
-grep-3.8-r1
-guile-3.0.8-r3
-guile-libs-3.0.8-r3
-hexdump-2.38.1-r0
-hvtools-4.11.9-r2
-ifupdown-ng-0.12.1-r0
-ifupdown-ng-ethtool-0.12.1-r0
-ifupdown-ng-iproute2-0.12.1-r0
-ifupdown-ng-wifi-0.12.1-r0
-ifupdown-ng-wireguard-0.12.1-r0
-ifupdown-ng-wireguard-quick-0.12.1-r0
-inih-56-r0
-installkernel-3.5-r2
-ip6tables-1.8.8-r2
-ip6tables-openrc-1.8.8-r2
-iperf3-3.12-r0
-iperf3-openrc-3.12-r0
-iproute2-6.0.0-r1
-iproute2-minimal-6.0.0-r1
-iproute2-ss-6.0.0-r1
-iproute2-tc-6.0.0-r1
-iptables-1.8.8-r2
-iptables-openrc-1.8.8-r2
-ipvsadm-1.31-r1
-isl25-0.25-r0
-jq-1.6-r2
-json-c-0.16-r0
-keyutils-1.6.3-r1
-keyutils-libs-1.6.3-r1
-kmod-30-r1
-kmod-libs-30-r1
-kmod-openrc-30-r1
+busybox-1.36.1-r15
+busybox-binsh-1.36.1-r15
+bzip2-1.0.8-r6
+c-ares-1.24.0-r1
+ca-certificates-20230506-r0
+ca-certificates-bundle-20230506-r0
+capstone-5.0.1-r1
+cdrkit-1.1.11-r6
+cfdisk-2.39.3-r0
+cifs-utils-7.0-r2
+clang17-17.0.5-r0
+clang17-dev-17.0.5-r0
+clang17-extra-tools-17.0.5-r0
+clang17-headers-17.0.5-r0
+clang17-libclang-17.0.5-r0
+clang17-libs-17.0.5-r0
+clang17-static-17.0.5-r0
+cmake-3.27.8-r0
+cmake-vim-3.27.8-r0
+coreutils-9.4-r1
+coreutils-env-9.4-r1
+coreutils-fmt-9.4-r1
+coreutils-sha512sum-9.4-r1
+cryptsetup-2.6.1-r8
+cryptsetup-libs-2.6.1-r8
+cryptsetup-openrc-2.6.1-r8
+curl-8.5.0-r0
+dbus-libs-1.14.10-r0
+device-mapper-2.03.23-r0
+device-mapper-event-libs-2.03.23-r0
+device-mapper-libs-2.03.23-r0
+device-mapper-udev-2.03.23-r0
+dhcpcd-10.0.5-r0
+dhcpcd-openrc-10.0.5-r0
+diffutils-3.10-r0
+dosfstools-4.2-r2
+dtc-1.7.0-r1
+e2fsprogs-1.47.0-r5
+e2fsprogs-dev-1.47.0-r5
+e2fsprogs-extra-1.47.0-r5
+e2fsprogs-libs-1.47.0-r5
+elfutils-dev-0.190-r1
+ethtool-6.6-r0
+eudev-3.2.14-r0
+eudev-libs-3.2.14-r0
+eudev-openrc-3.2.14-r0
+expect-5.45.4-r4
+fakeroot-1.32.1-r0
+file-5.45-r1
+findmnt-2.39.3-r0
+findutils-4.9.0-r5
+flex-2.6.4-r6
+flex-dev-2.6.4-r6
+flex-libs-2.6.4-r6
+flock-2.39.3-r0
+fortify-headers-1.1-r3
+fstrim-2.39.3-r0
+g++-13.2.1_git20231014-r0
+gawk-5.3.0-r0
+gc-8.2.4-r1
+gcc-13.2.1_git20231014-r0
+gcompat-1.1.0-r4
+gdbm-1.23-r1
+gettext-0.22.3-r0
+gettext-asprintf-0.22.3-r0
+gettext-dev-0.22.3-r0
+gettext-envsubst-0.22.3-r0
+gettext-libs-0.22.3-r0
+git-2.43.0-r0
+git-perl-2.43.0-r0
+glib-2.78.4-r0
+gmp-6.3.0-r0
+gmp-dev-6.3.0-r0
+gnupg-2.4.3-r1
+gnupg-dirmngr-2.4.3-r1
+gnupg-gpgconf-2.4.3-r1
+gnupg-keyboxd-2.4.3-r1
+gnupg-utils-2.4.3-r1
+gnupg-wks-client-2.4.3-r1
+gnutls-3.8.3-r0
+go-1.21.6-r0
+gpg-2.4.3-r1
+gpg-agent-2.4.3-r1
+gpg-wks-server-2.4.3-r1
+gpgsm-2.4.3-r1
+gpgv-2.4.3-r1
+grep-3.11-r0
+guile-3.0.9-r0
+guile-libs-3.0.9-r0
+hexdump-2.39.3-r0
+hvtools-4.11.9-r4
+hvtools-openrc-4.11.9-r4
+ifupdown-ng-0.12.1-r4
+ifupdown-ng-ethtool-0.12.1-r4
+ifupdown-ng-iproute2-0.12.1-r4
+ifupdown-ng-wifi-0.12.1-r4
+ifupdown-ng-wireguard-0.12.1-r4
+ifupdown-ng-wireguard-quick-0.12.1-r4
+inih-57-r1
+installkernel-3.6-r0
+iperf3-3.16-r0
+iperf3-openrc-3.16-r0
+iproute2-6.6.0-r0
+iproute2-minimal-6.6.0-r0
+iproute2-ss-6.6.0-r0
+iproute2-tc-6.6.0-r0
+iptables-1.8.10-r3
+iptables-openrc-1.8.10-r3
+ipvsadm-1.31-r3
+ipvsadm-openrc-1.31-r3
+isl26-0.26-r1
+jansson-2.14-r4
+jq-1.7.1-r0
+json-c-0.17-r0
+keyutils-1.6.3-r3
+keyutils-libs-1.6.3-r3
+kmod-31-r2
+kmod-libs-31-r2
+kmod-openrc-31-r2
 krb5-conf-1.0-r2
-krb5-dev-1.20.1-r0
-krb5-libs-1.20.1-r0
-krb5-server-ldap-1.20.1-r0
-libacl-2.3.1-r1
-libaio-0.3.113-r0
-libarchive-3.6.1-r2
-libarchive-tools-3.6.1-r2
-libassuan-2.5.5-r1
-libatomic-12.2.1_git20220924-r4
-libattr-2.5.1-r2
-libblkid-2.38.1-r0
-libburn-1.5.4-r2
-libbz2-1.0.8-r4
-libc-dev-0.7.2-r3
-libc-utils-0.7.2-r3
-libc6-compat-1.2.3-r4
-libcap-ng-0.8.3-r1
-libcap-ng-dev-0.8.3-r1
-libcap2-2.66-r0
-libcom_err-1.46.5-r4
-libcrypto3-3.0.7-r0
-libcurl-7.87.0-r0
-libeconf-0.4.7-r0
-libedit-20221030.3.1-r0
-libedit-dev-20221030.3.1-r0
-libelf-0.187-r2
-libelf-static-0.187-r2
-libev-4.33-r0
-libevent-2.1.12-r5
-libexpat-2.5.0-r0
-libfdisk-2.38.1-r0
-libfdt-1.6.1-r2
-libffi-3.4.4-r0
-libffi-dev-3.4.4-r0
-libgcc-12.2.1_git20220924-r4
-libgcrypt-1.10.1-r0
-libgmpxx-6.2.1-r2
-libgomp-12.2.1_git20220924-r4
-libgpg-error-1.46-r1
-libintl-0.21.1-r1
-libisoburn-1.5.4-r2
-libisofs-1.5.4-r2
-libjpeg-turbo-2.1.4-r0
-libksba-1.6.3-r0
-libldap-2.6.3-r6
-libltdl-2.4.7-r0
-libmagic-5.43-r0
-libmnl-1.0.5-r0
-libmount-2.38.1-r0
-libnfsidmap-2.6.2-r0
-libnftnl-1.2.4-r0
-libnl3-3.7.0-r0
-libpcap-1.10.1-r1
-libpng-1.6.38-r0
-libressl-dev-3.6.1-r0
-libressl3.6-libcrypto-3.6.1-r0
-libressl3.6-libssl-3.6.1-r0
-libressl3.6-libtls-3.6.1-r0
-libretls-3.5.2-r1
-libsasl-2.1.28-r3
-libseccomp-2.5.4-r0
-libseccomp-dev-2.5.4-r0
-libseccomp-static-2.5.4-r0
+krb5-dev-1.21.2-r0
+krb5-libs-1.21.2-r0
+krb5-server-ldap-1.21.2-r0
+libacl-2.3.1-r4
+libaio-0.3.113-r2
+libarchive-3.7.2-r0
+libarchive-tools-3.7.2-r0
+libasm-0.190-r1
+libassuan-2.5.6-r1
+libatomic-13.2.1_git20231014-r0
+libattr-2.5.1-r5
+libblkid-2.39.3-r0
+libbpf-1.3.0-r0
+libburn-1.5.6-r0
+libbz2-1.0.8-r6
+libc-dev-0.7.2-r5
+libc-utils-0.7.2-r5
+libcap-getcap-2.69-r1
+libcap-ng-0.8.3-r4
+libcap-ng-dev-0.8.3-r4
+libcap2-2.69-r1
+libcom_err-1.47.0-r5
+libcrypto3-3.1.4-r4
+libcurl-8.5.0-r0
+libdw-0.190-r1
+libeconf-0.5.2-r2
+libedit-20230828.3.1-r3
+libedit-dev-20230828.3.1-r3
+libelf-0.190-r1
+libev-4.33-r1
+libevent-2.1.12-r7
+libexpat-2.5.0-r2
+libfdisk-2.39.3-r0
+libfdt-1.7.0-r1
+libffi-3.4.4-r3
+libffi-dev-3.4.4-r3
+libformw-6.4_p20231125-r0
+libgcc-13.2.1_git20231014-r0
+libgcrypt-1.10.3-r0
+libgmpxx-6.3.0-r0
+libgomp-13.2.1_git20231014-r0
+libgpg-error-1.47-r2
+libidn2-2.3.4-r4
+libintl-0.22.3-r0
+libisoburn-1.5.6-r0
+libisofs-1.5.6-r0
+libjpeg-turbo-3.0.1-r0
+libksba-1.6.5-r0
+libldap-2.6.6-r1
+libltdl-2.4.7-r3
+libmagic-5.45-r1
+libmenuw-6.4_p20231125-r0
+libmnl-1.0.5-r2
+libmount-2.39.3-r0
+libncurses++-6.4_p20231125-r0
+libncursesw-6.4_p20231125-r0
+libnfsidmap-2.6.4-r0
+libnftnl-1.2.6-r0
+libnl3-3.9.0-r0
+libpanelw-6.4_p20231125-r0
+libpcap-1.10.4-r1
+libpng-1.6.40-r0
+libressl-dev-3.8.2-r0
+libressl3.8-libcrypto-3.8.2-r0
+libressl3.8-libssl-3.8.2-r0
+libressl3.8-libtls-3.8.2-r0
+libretls-3.7.0-r2
+libsasl-2.1.28-r5
+libseccomp-2.5.5-r0
+libseccomp-dev-2.5.5-r0
+libseccomp-static-2.5.5-r0
 libslirp-4.7.0-r0
-libsmartcols-2.38.1-r0
-libssl3-3.0.7-r0
-libstdc++-12.2.1_git20220924-r4
-libstdc++-dev-12.2.1_git20220924-r4
-libtasn1-4.19.0-r0
-libtirpc-1.3.3-r0
-libtirpc-conf-1.3.3-r0
-libtirpc-dev-1.3.3-r0
-libtirpc-nokrb-1.3.3-r0
-libtool-2.4.7-r0
-libucontext-1.2-r0
-libucontext-dev-1.2-r0
-libunistring-1.1-r0
-libunwind-1.6.2-r0
-libunwind-dev-1.6.2-r0
-liburing-2.3-r0
-libuuid-2.38.1-r0
-libuv-1.44.2-r0
-libverto-0.3.2-r1
-libverto-dev-0.3.2-r1
-libverto-glib-0.3.2-r1
-libverto-libev-0.3.2-r1
-libverto-libevent-0.3.2-r1
-libwbclient-4.16.8-r0
-libxml2-2.10.3-r1
-linux-headers-5.19.5-r0
-linux-pam-1.5.2-r1
-llvm15-15.0.6-r0
-llvm15-dev-15.0.6-r0
-llvm15-libs-15.0.6-r0
-llvm15-static-15.0.6-r0
-llvm15-test-utils-15.0.6-r0
-logger-2.38.1-r0
-losetup-2.38.1-r0
-lsblk-2.38.1-r0
+libsmartcols-2.39.3-r0
+libssl3-3.1.4-r4
+libstdc++-13.2.1_git20231014-r0
+libstdc++-dev-13.2.1_git20231014-r0
+libtasn1-4.19.0-r2
+libtirpc-1.3.4-r0
+libtirpc-conf-1.3.4-r0
+libtirpc-dev-1.3.4-r0
+libtirpc-nokrb-1.3.4-r0
+libtool-2.4.7-r3
+libucontext-1.2-r2
+libucontext-dev-1.2-r2
+libunistring-1.1-r2
+libunwind-1.7.2-r1
+libunwind-dev-1.7.2-r1
+liburing-2.5-r1
+libuuid-2.39.3-r0
+libuv-1.47.0-r0
+libverto-0.3.2-r2
+libverto-dev-0.3.2-r2
+libverto-glib-0.3.2-r2
+libverto-libev-0.3.2-r2
+libverto-libevent-0.3.2-r2
+libwbclient-4.18.9-r0
+libxml2-2.11.6-r0
+libxtables-1.8.10-r3
+libxxhash-0.8.2-r2
+linux-headers-6.5-r0
+linux-pam-1.5.3-r7
+llvm17-17.0.5-r0
+llvm17-dev-17.0.5-r0
+llvm17-libs-17.0.5-r0
+llvm17-linker-tools-17.0.5-r0
+llvm17-static-17.0.5-r0
+llvm17-test-utils-17.0.5-r0
+llvm17-test-utils-pyc-17.0.5-r0
+logger-2.39.3-r0
+losetup-2.39.3-r0
+lsblk-2.39.3-r0
 lsscsi-0.32-r1
-luajit-2.1_p20210510-r3
-luajit-dev-2.1_p20210510-r3
-lvm2-2.03.17-r1
-lvm2-libs-2.03.17-r1
-lvm2-openrc-2.03.17-r1
-lz4-libs-1.9.4-r1
-lzip-1.23-r0
-lzo-2.10-r3
-m4-1.4.19-r1
-make-4.3-r1
-mcookie-2.38.1-r0
-mount-2.38.1-r0
-mpc1-1.2.1-r1
-mpc1-dev-1.2.1-r1
-mpdecimal-2.5.1-r1
-mpfr-dev-4.1.0-r0
-mpfr4-4.1.0-r0
-mtools-4.0.42-r0
-multipath-tools-0.9.3-r1
-multipath-tools-openrc-0.9.3-r1
-musl-1.2.3-r4
-musl-dev-1.2.3-r4
-musl-fts-1.2.7-r3
-musl-fts-dev-1.2.7-r3
-musl-utils-1.2.3-r4
-ncurses-dev-6.3_p20221119-r0
-ncurses-libs-6.3_p20221119-r0
-ncurses-terminfo-base-6.3_p20221119-r0
-nettle-3.8.1-r0
-nfs-utils-2.6.2-r0
-nfs-utils-openrc-2.6.2-r0
-nghttp2-libs-1.51.0-r0
-npth-1.6-r2
-numactl-2.0.16-r0
-oniguruma-6.9.8-r0
-open-iscsi-2.1.8-r0
-open-iscsi-libs-2.1.8-r0
-open-iscsi-openrc-2.1.8-r0
-open-isns-lib-0.102-r0
-openntpd-6.8_p1-r7
-openntpd-openrc-6.8_p1-r7
-openrc-0.45.2-r7
-openresolv-3.12.0-r1
-openssh-client-common-9.1_p1-r1
-openssh-client-default-9.1_p1-r1
-openssh-keygen-9.1_p1-r1
-openssh-server-9.1_p1-r1
-openssh-server-common-9.1_p1-r1
-openssl-3.0.7-r0
-openssl-dev-3.0.7-r0
-p11-kit-0.24.1-r1
-partx-2.38.1-r0
-patch-2.7.6-r8
-pcre-8.45-r2
-pcre2-10.42-r0
-pcsc-lite-libs-1.9.9-r0
-perl-5.36.0-r0
-perl-error-0.17029-r1
-perl-git-2.38.2-r0
-pigz-2.7-r0
-pinentry-1.2.1-r0
-pixman-0.42.2-r0
-pkgconf-1.9.3-r0
-popt-1.19-r0
-py3-capstone-4.0.2-r4
-py3-packaging-21.3-r2
-py3-parsing-3.0.9-r0
-py3-setuptools-65.6.0-r0
-python3-3.10.9-r1
-qemu-7.1.0-r7
-qemu-aarch64-7.1.0-r7
-qemu-arm-7.1.0-r7
-qemu-guest-agent-7.1.0-r7
-qemu-img-7.1.0-r7
-qemu-ppc64le-7.1.0-r7
-qemu-system-aarch64-7.1.0-r7
-qemu-system-arm-7.1.0-r7
-qemu-system-x86_64-7.1.0-r7
-readline-8.2.0-r0
-rhash-libs-1.4.3-r1
-rpcbind-1.2.6-r1
-rpcbind-openrc-1.2.6-r1
-rsync-3.2.7-r0
-rsync-openrc-3.2.7-r0
-runuser-2.38.1-r0
-scanelf-1.3.5-r1
-sed-4.9-r0
-setpriv-2.38.1-r0
-sfdisk-2.38.1-r0
-sg3_utils-1.47-r0
-sgdisk-1.0.9-r2
-skalibs-2.12.0.1-r0
-slang-2.3.3-r0
-slang-dev-2.3.3-r0
-snappy-1.1.9-r4
-sntpc-0.9-r8
-sntpc-openrc-0.9-r8
-socat-1.7.4.4-r0
-sqlite-libs-3.40.1-r0
-squashfs-tools-4.5.1-r1
-ssl_client-1.35.0-r29
-strace-6.0-r0
-swig-4.0.2-r7
-talloc-2.3.4-r0
-tar-1.34-r1
-tcl-8.6.12-r1
-tcpdump-4.99.1-r4
-tini-0.19.0-r1
-tzdata-2022f-r1
+luajit-2.1_p20230410-r3
+luajit-dev-2.1_p20230410-r3
+lvm2-2.03.23-r0
+lvm2-libs-2.03.23-r0
+lvm2-openrc-2.03.23-r0
+lz4-libs-1.9.4-r5
+lzip-1.23-r1
+lzo-2.10-r5
+m4-1.4.19-r3
+make-4.4.1-r2
+mcookie-2.39.3-r0
+mount-2.39.3-r0
+mpc1-1.3.1-r1
+mpc1-dev-1.3.1-r1
+mpdecimal-2.5.1-r2
+mpfr-dev-4.2.1-r0
+mpfr4-4.2.1-r0
+mtools-4.0.43-r1
+multipath-tools-0.9.7-r1
+multipath-tools-openrc-0.9.7-r1
+musl-1.2.4_git20230717-r4
+musl-dev-1.2.4_git20230717-r4
+musl-fts-1.2.7-r6
+musl-fts-dev-1.2.7-r6
+musl-obstack-1.2.3-r2
+musl-utils-1.2.4_git20230717-r4
+ncurses-dev-6.4_p20231125-r0
+ncurses-terminfo-base-6.4_p20231125-r0
+nettle-3.9.1-r0
+nfs-utils-2.6.4-r0
+nfs-utils-openrc-2.6.4-r0
+nghttp2-libs-1.58.0-r0
+npth-1.6-r4
+numactl-2.0.16-r4
+oniguruma-6.9.9-r0
+open-iscsi-2.1.9-r1
+open-iscsi-libs-2.1.9-r1
+open-iscsi-openrc-2.1.9-r1
+open-isns-lib-0.102-r1
+openntpd-6.8_p1-r9
+openntpd-openrc-6.8_p1-r9
+openrc-0.52.1-r2
+openresolv-3.13.2-r0
+openssh-client-common-9.6_p1-r0
+openssh-client-default-9.6_p1-r0
+openssh-keygen-9.6_p1-r0
+openssh-server-9.6_p1-r0
+openssh-server-common-9.6_p1-r0
+openssh-server-common-openrc-9.6_p1-r0
+openssl-3.1.4-r4
+openssl-dev-3.1.4-r4
+p11-kit-0.25.3-r0
+partx-2.39.3-r0
+patch-2.7.6-r10
+pcre2-10.42-r2
+pcsc-lite-libs-2.0.0-r2
+perl-5.38.2-r0
+perl-error-0.17029-r2
+perl-git-2.43.0-r0
+pigz-2.8-r0
+pinentry-1.2.1-r1
+pixman-0.42.2-r2
+pkgconf-2.1.0-r0
+popt-1.19-r3
+py3-capstone-5.0.1-r1
+py3-capstone-pyc-5.0.1-r1
+py3-packaging-23.2-r0
+py3-packaging-pyc-23.2-r0
+py3-parsing-3.1.1-r0
+py3-parsing-pyc-3.1.1-r0
+py3-setuptools-68.2.2-r0
+py3-setuptools-pyc-68.2.2-r0
+pyc-3.11.6-r1
+python3-3.11.6-r1
+python3-pyc-3.11.6-r1
+python3-pycache-pyc0-3.11.6-r1
+qemu-8.1.4-r0
+qemu-aarch64-8.1.4-r0
+qemu-arm-8.1.4-r0
+qemu-bridge-helper-8.1.4-r0
+qemu-guest-agent-8.1.4-r0
+qemu-guest-agent-openrc-8.1.4-r0
+qemu-img-8.1.4-r0
+qemu-ppc64le-8.1.4-r0
+qemu-system-aarch64-8.1.4-r0
+qemu-system-arm-8.1.4-r0
+qemu-system-x86_64-8.1.4-r0
+readline-8.2.1-r2
+rhash-libs-1.4.4-r0
+rpcbind-1.2.6-r2
+rpcbind-openrc-1.2.6-r2
+rsync-3.2.7-r4
+rsync-openrc-3.2.7-r4
+runuser-2.39.3-r0
+scanelf-1.3.7-r2
+sed-4.9-r2
+setarch-2.39.3-r0
+setpriv-2.39.3-r0
+sfdisk-2.39.3-r0
+sg3_utils-1.47-r1
+sgdisk-1.0.9-r4
+skalibs-2.14.0.1-r0
+slang-2.3.3-r3
+slang-dev-2.3.3-r3
+snappy-1.1.10-r2
+sntpc-0.9-r11
+sntpc-openrc-0.9-r11
+socat-1.8.0.0-r0
+sqlite-libs-3.44.2-r0
+squashfs-tools-4.6.1-r1
+ssl_client-1.36.1-r15
+strace-6.6-r0
+swig-4.1.1-r5
+talloc-2.4.1-r1
+tar-1.35-r2
+tcl-8.6.13-r1
+tcpdump-4.99.4-r1
+tini-0.19.0-r2
+tzdata-2023d-r0
 udev-init-scripts-35-r1
 udev-init-scripts-openrc-35-r1
-umount-2.38.1-r0
-userspace-rcu-0.13.2-r0
-util-linux-2.38.1-r0
-util-linux-dev-2.38.1-r0
-util-linux-misc-2.38.1-r0
-util-linux-openrc-2.38.1-r0
-utmps-libs-0.1.2.0-r1
-uuidgen-2.38.1-r0
-vde2-libs-2.3.3-r0
-vim-9.0.0999-r0
-wipefs-2.38.1-r0
-wireguard-tools-1.0.20210914-r1
-wireguard-tools-wg-1.0.20210914-r1
-wireguard-tools-wg-quick-1.0.20210914-r1
-wireless-tools-30_pre9-r2
-wpa_supplicant-2.10-r4
-wpa_supplicant-openrc-2.10-r4
-xfsprogs-6.0.0-r0
-xfsprogs-extra-6.0.0-r0
-xorriso-1.5.4-r2
-xxd-9.0.0999-r0
-xz-5.2.9-r0
-xz-dev-5.2.9-r0
-xz-libs-5.2.9-r0
-zfs-2.1.7-r0
-zfs-libs-2.1.7-r0
-zfs-openrc-2.1.7-r0
-zlib-1.2.13-r0
-zlib-dev-1.2.13-r0
-zlib-static-1.2.13-r0
-zstd-dev-1.5.2-r9
-zstd-libs-1.5.2-r9
+umount-2.39.3-r0
+unzip-6.0-r14
+userspace-rcu-0.14.0-r2
+util-linux-2.39.3-r0
+util-linux-dev-2.39.3-r0
+util-linux-misc-2.39.3-r0
+util-linux-openrc-2.39.3-r0
+utmps-libs-0.1.2.2-r0
+uuidgen-2.39.3-r0
+vde2-libs-2.3.3-r2
+vim-9.0.2127-r0
+vim-common-9.0.2127-r0
+wipefs-2.39.3-r0
+wireguard-tools-1.0.20210914-r3
+wireguard-tools-wg-1.0.20210914-r3
+wireguard-tools-wg-quick-1.0.20210914-r3
+wireless-tools-30_pre9-r4
+wireless-tools-libs-30_pre9-r4
+wpa_supplicant-2.10-r9
+wpa_supplicant-openrc-2.10-r9
+xfsprogs-6.5.0-r0
+xfsprogs-extra-6.5.0-r0
+xorriso-1.5.6-r0
+xxd-9.0.2127-r0
+xz-5.4.5-r0
+xz-dev-5.4.5-r0
+xz-libs-5.4.5-r0
+zfs-2.2.2-r0
+zfs-libs-2.2.2-r0
+zfs-openrc-2.2.2-r0
+zip-3.0-r12
+zlib-1.3.1-r0
+zlib-dev-1.3.1-r0
+zlib-static-1.3.1-r0
+zstd-1.5.5-r8
+zstd-dev-1.5.5-r8
+zstd-libs-1.5.5-r8
diff --git a/tools/alpine/versions.x86_64 b/tools/alpine/versions.x86_64
index 6b2a376a2..16cd9788b 100644
--- a/tools/alpine/versions.x86_64
+++ b/tools/alpine/versions.x86_64
@@ -1,397 +1,437 @@
-# linuxkit/alpine:1b63e5acc280c78c66142de425b0a0b20c33af43-amd64
+# linuxkit/alpine:cafc1e140831962dc7f42bd3ee97e6a283345de9-amd64
 # automatically generated list of installed packages
-abuild-3.10.0-r0
-acpid-2.0.34-r0
-acpid-openrc-2.0.34-r0
-agetty-2.38.1-r0
-agetty-openrc-0.45.2-r7
-alpine-baselayout-3.4.0-r0
-alpine-baselayout-data-3.4.0-r0
+abuild-3.12.0-r0
+acpid-2.0.34-r3
+acpid-openrc-2.0.34-r3
+agetty-2.39.3-r0
+agetty-openrc-0.52.1-r2
+alpine-baselayout-3.4.3-r2
+alpine-baselayout-data-3.4.3-r2
 alpine-keys-2.4-r1
-apk-tools-2.12.10-r1
-argon2-libs-20190702-r2
-argp-standalone-1.5.0-r0
-attr-2.5.1-r2
-attr-dev-2.5.1-r2
-audit-3.0.9-r0
-audit-libs-3.0.9-r0
-audit-openrc-3.0.9-r0
-autoconf-2.71-r1
-automake-1.16.5-r1
-bash-5.2.15-r0
-bc-1.07.1-r2
-binutils-2.39-r2
-binutils-dev-2.39-r2
-bison-3.8.2-r0
-blkid-2.38.1-r0
-bridge-utils-1.7.1-r1
-brotli-libs-1.0.9-r9
-bsd-compat-headers-0.7.2-r3
-btrfs-progs-6.0.2-r0
-btrfs-progs-dev-6.0.2-r0
-btrfs-progs-libs-6.0.2-r0
+apk-tools-2.14.0-r5
+argon2-libs-20190702-r5
+argp-standalone-1.5.0-r1
+attr-2.5.1-r5
+attr-dev-2.5.1-r5
+audit-3.1.2-r1
+audit-libs-3.1.2-r1
+audit-openrc-3.1.2-r1
+autoconf-2.71-r2
+automake-1.16.5-r2
+bash-5.2.21-r0
+bc-1.07.1-r4
+bcc-0.28.0-r1
+bcc-dev-0.28.0-r1
+binutils-2.41-r0
+binutils-dev-2.41-r0
+bison-3.8.2-r1
+blkid-2.39.3-r0
+bridge-utils-1.7.1-r2
+brotli-libs-1.1.0-r1
+bsd-compat-headers-0.7.2-r5
+btrfs-progs-6.6.2-r0
+btrfs-progs-dev-6.6.2-r0
+btrfs-progs-libs-6.6.2-r0
+btrfs-progs-openrc-6.6.2-r0
 build-base-0.5-r3
-busybox-1.35.0-r29
-busybox-binsh-1.35.0-r29
-bzip2-1.0.8-r4
-ca-certificates-20220614-r3
-ca-certificates-bundle-20220614-r3
-capstone-4.0.2-r4
-cdrkit-1.1.11-r4
-cfdisk-2.38.1-r0
-cifs-utils-7.0-r0
-clang15-15.0.6-r0
-clang15-dev-15.0.6-r0
-clang15-extra-tools-15.0.6-r0
-clang15-libclang-15.0.6-r0
-clang15-libs-15.0.6-r0
-clang15-static-15.0.6-r0
-cmake-3.24.3-r0
-coreutils-9.1-r0
-cryptsetup-2.5.0-r2
-cryptsetup-libs-2.5.0-r2
-cryptsetup-openrc-2.5.0-r2
-curl-7.87.0-r0
-dbus-libs-1.14.4-r0
-device-mapper-2.03.17-r1
-device-mapper-event-libs-2.03.17-r1
-device-mapper-libs-2.03.17-r1
-device-mapper-udev-2.03.17-r1
-dhcpcd-9.4.1-r1
-dhcpcd-openrc-9.4.1-r1
-diffutils-3.8-r1
-dosfstools-4.2-r1
-dtc-1.6.1-r2
-e2fsprogs-1.46.5-r4
-e2fsprogs-dev-1.46.5-r4
-e2fsprogs-extra-1.46.5-r4
-e2fsprogs-libs-1.46.5-r4
-elfutils-dev-0.187-r2
-ethtool-6.0-r0
-eudev-3.2.11-r4
-eudev-libs-3.2.11-r4
-eudev-openrc-3.2.11-r4
-expect-5.45.4-r3
-fakeroot-1.29-r0
-file-5.43-r0
-findmnt-2.38.1-r0
-findutils-4.9.0-r2
-flex-2.6.4-r3
-flex-dev-2.6.4-r3
-flex-libs-2.6.4-r3
-flock-2.38.1-r0
-fortify-headers-1.1-r1
-fstrim-2.38.1-r0
-g++-12.2.1_git20220924-r4
-gawk-5.1.1-r1
-gc-8.2.2-r0
-gcc-12.2.1_git20220924-r4
-gdbm-1.23-r0
-gettext-0.21.1-r1
-gettext-asprintf-0.21.1-r1
-gettext-dev-0.21.1-r1
-gettext-libs-0.21.1-r1
-git-2.38.2-r0
-git-perl-2.38.2-r0
-glib-2.74.4-r0
-gmp-6.2.1-r2
-gmp-dev-6.2.1-r2
-gnupg-2.2.40-r0
-gnupg-dirmngr-2.2.40-r0
-gnupg-gpgconf-2.2.40-r0
-gnupg-utils-2.2.40-r0
-gnupg-wks-client-2.2.40-r0
-gnutls-3.7.8-r2
-go-1.19.4-r0
-gpg-2.2.40-r0
-gpg-agent-2.2.40-r0
-gpg-wks-server-2.2.40-r0
-gpgsm-2.2.40-r0
-gpgv-2.2.40-r0
-grep-3.8-r1
-guile-3.0.8-r3
-guile-libs-3.0.8-r3
-hexdump-2.38.1-r0
-hvtools-4.11.9-r2
-ifupdown-ng-0.12.1-r0
-ifupdown-ng-ethtool-0.12.1-r0
-ifupdown-ng-iproute2-0.12.1-r0
-ifupdown-ng-wifi-0.12.1-r0
-ifupdown-ng-wireguard-0.12.1-r0
-ifupdown-ng-wireguard-quick-0.12.1-r0
-inih-56-r0
-installkernel-3.5-r2
-ip6tables-1.8.8-r2
-ip6tables-openrc-1.8.8-r2
-iperf3-3.12-r0
-iperf3-openrc-3.12-r0
-iproute2-6.0.0-r1
-iproute2-minimal-6.0.0-r1
-iproute2-ss-6.0.0-r1
-iproute2-tc-6.0.0-r1
-iptables-1.8.8-r2
-iptables-openrc-1.8.8-r2
-ipvsadm-1.31-r1
-isl25-0.25-r0
-jq-1.6-r2
-json-c-0.16-r0
-keyutils-1.6.3-r1
-keyutils-libs-1.6.3-r1
-kmod-30-r1
-kmod-libs-30-r1
-kmod-openrc-30-r1
+busybox-1.36.1-r15
+busybox-binsh-1.36.1-r15
+bzip2-1.0.8-r6
+c-ares-1.24.0-r1
+ca-certificates-20230506-r0
+ca-certificates-bundle-20230506-r0
+capstone-5.0.1-r1
+cdrkit-1.1.11-r6
+cfdisk-2.39.3-r0
+cifs-utils-7.0-r2
+clang17-17.0.5-r0
+clang17-dev-17.0.5-r0
+clang17-extra-tools-17.0.5-r0
+clang17-headers-17.0.5-r0
+clang17-libclang-17.0.5-r0
+clang17-libs-17.0.5-r0
+clang17-static-17.0.5-r0
+cmake-3.27.8-r0
+cmake-vim-3.27.8-r0
+coreutils-9.4-r1
+coreutils-env-9.4-r1
+coreutils-fmt-9.4-r1
+coreutils-sha512sum-9.4-r1
+cryptsetup-2.6.1-r8
+cryptsetup-libs-2.6.1-r8
+cryptsetup-openrc-2.6.1-r8
+curl-8.5.0-r0
+dbus-libs-1.14.10-r0
+device-mapper-2.03.23-r0
+device-mapper-event-libs-2.03.23-r0
+device-mapper-libs-2.03.23-r0
+device-mapper-udev-2.03.23-r0
+dhcpcd-10.0.5-r0
+dhcpcd-openrc-10.0.5-r0
+diffutils-3.10-r0
+dosfstools-4.2-r2
+dtc-1.7.0-r1
+e2fsprogs-1.47.0-r5
+e2fsprogs-dev-1.47.0-r5
+e2fsprogs-extra-1.47.0-r5
+e2fsprogs-libs-1.47.0-r5
+elfutils-dev-0.190-r1
+ethtool-6.6-r0
+eudev-3.2.14-r0
+eudev-libs-3.2.14-r0
+eudev-openrc-3.2.14-r0
+expect-5.45.4-r4
+fakeroot-1.32.1-r0
+file-5.45-r1
+findmnt-2.39.3-r0
+findutils-4.9.0-r5
+flex-2.6.4-r6
+flex-dev-2.6.4-r6
+flex-libs-2.6.4-r6
+flock-2.39.3-r0
+fortify-headers-1.1-r3
+fstrim-2.39.3-r0
+g++-13.2.1_git20231014-r0
+gawk-5.3.0-r0
+gc-8.2.4-r1
+gcc-13.2.1_git20231014-r0
+gcompat-1.1.0-r4
+gdbm-1.23-r1
+gettext-0.22.3-r0
+gettext-asprintf-0.22.3-r0
+gettext-dev-0.22.3-r0
+gettext-envsubst-0.22.3-r0
+gettext-libs-0.22.3-r0
+git-2.43.0-r0
+git-perl-2.43.0-r0
+glib-2.78.4-r0
+gmp-6.3.0-r0
+gmp-dev-6.3.0-r0
+gnupg-2.4.3-r1
+gnupg-dirmngr-2.4.3-r1
+gnupg-gpgconf-2.4.3-r1
+gnupg-keyboxd-2.4.3-r1
+gnupg-utils-2.4.3-r1
+gnupg-wks-client-2.4.3-r1
+gnutls-3.8.3-r0
+go-1.21.6-r0
+gpg-2.4.3-r1
+gpg-agent-2.4.3-r1
+gpg-wks-server-2.4.3-r1
+gpgsm-2.4.3-r1
+gpgv-2.4.3-r1
+grep-3.11-r0
+guile-3.0.9-r0
+guile-libs-3.0.9-r0
+hexdump-2.39.3-r0
+hvtools-4.11.9-r4
+hvtools-openrc-4.11.9-r4
+ifupdown-ng-0.12.1-r4
+ifupdown-ng-ethtool-0.12.1-r4
+ifupdown-ng-iproute2-0.12.1-r4
+ifupdown-ng-wifi-0.12.1-r4
+ifupdown-ng-wireguard-0.12.1-r4
+ifupdown-ng-wireguard-quick-0.12.1-r4
+inih-57-r1
+installkernel-3.6-r0
+iperf3-3.16-r0
+iperf3-openrc-3.16-r0
+iproute2-6.6.0-r0
+iproute2-minimal-6.6.0-r0
+iproute2-ss-6.6.0-r0
+iproute2-tc-6.6.0-r0
+iptables-1.8.10-r3
+iptables-openrc-1.8.10-r3
+ipvsadm-1.31-r3
+ipvsadm-openrc-1.31-r3
+isl26-0.26-r1
+jansson-2.14-r4
+jq-1.7.1-r0
+json-c-0.17-r0
+keyutils-1.6.3-r3
+keyutils-libs-1.6.3-r3
+kmod-31-r2
+kmod-libs-31-r2
+kmod-openrc-31-r2
 krb5-conf-1.0-r2
-krb5-dev-1.20.1-r0
-krb5-libs-1.20.1-r0
-krb5-server-ldap-1.20.1-r0
-lddtree-1.26-r3
-libacl-2.3.1-r1
-libaio-0.3.113-r0
-libarchive-3.6.1-r2
-libarchive-tools-3.6.1-r2
-libassuan-2.5.5-r1
-libatomic-12.2.1_git20220924-r4
-libattr-2.5.1-r2
-libblkid-2.38.1-r0
-libburn-1.5.4-r2
-libbz2-1.0.8-r4
-libc-dev-0.7.2-r3
-libc-utils-0.7.2-r3
-libc6-compat-1.2.3-r4
-libcap-ng-0.8.3-r1
-libcap-ng-dev-0.8.3-r1
-libcap2-2.66-r0
-libcom_err-1.46.5-r4
-libcrypto3-3.0.7-r0
-libcurl-7.87.0-r0
-libeconf-0.4.7-r0
-libedit-20221030.3.1-r0
-libedit-dev-20221030.3.1-r0
-libelf-0.187-r2
-libelf-static-0.187-r2
-libev-4.33-r0
-libevent-2.1.12-r5
-libexpat-2.5.0-r0
-libfdisk-2.38.1-r0
-libfdt-1.6.1-r2
-libffi-3.4.4-r0
-libffi-dev-3.4.4-r0
-libgcc-12.2.1_git20220924-r4
-libgcrypt-1.10.1-r0
-libgmpxx-6.2.1-r2
-libgomp-12.2.1_git20220924-r4
-libgpg-error-1.46-r1
-libintl-0.21.1-r1
-libisoburn-1.5.4-r2
-libisofs-1.5.4-r2
-libjpeg-turbo-2.1.4-r0
-libksba-1.6.3-r0
-libldap-2.6.3-r6
-libltdl-2.4.7-r0
-libmagic-5.43-r0
-libmnl-1.0.5-r0
-libmount-2.38.1-r0
-libmspack-0.10.1_alpha-r0
-libnfsidmap-2.6.2-r0
-libnftnl-1.2.4-r0
-libnl3-3.7.0-r0
-libpcap-1.10.1-r1
-libpng-1.6.38-r0
-libressl-dev-3.6.1-r0
-libressl3.6-libcrypto-3.6.1-r0
-libressl3.6-libssl-3.6.1-r0
-libressl3.6-libtls-3.6.1-r0
-libretls-3.5.2-r1
-libsasl-2.1.28-r3
-libseccomp-2.5.4-r0
-libseccomp-dev-2.5.4-r0
-libseccomp-static-2.5.4-r0
+krb5-dev-1.21.2-r0
+krb5-libs-1.21.2-r0
+krb5-server-ldap-1.21.2-r0
+lddtree-1.27-r0
+libacl-2.3.1-r4
+libaio-0.3.113-r2
+libarchive-3.7.2-r0
+libarchive-tools-3.7.2-r0
+libasm-0.190-r1
+libassuan-2.5.6-r1
+libatomic-13.2.1_git20231014-r0
+libattr-2.5.1-r5
+libblkid-2.39.3-r0
+libbpf-1.3.0-r0
+libburn-1.5.6-r0
+libbz2-1.0.8-r6
+libc-dev-0.7.2-r5
+libc-utils-0.7.2-r5
+libcap-getcap-2.69-r1
+libcap-ng-0.8.3-r4
+libcap-ng-dev-0.8.3-r4
+libcap2-2.69-r1
+libcom_err-1.47.0-r5
+libcrypto3-3.1.4-r4
+libcurl-8.5.0-r0
+libdw-0.190-r1
+libeconf-0.5.2-r2
+libedit-20230828.3.1-r3
+libedit-dev-20230828.3.1-r3
+libelf-0.190-r1
+libev-4.33-r1
+libevent-2.1.12-r7
+libexpat-2.5.0-r2
+libfdisk-2.39.3-r0
+libfdt-1.7.0-r1
+libffi-3.4.4-r3
+libffi-dev-3.4.4-r3
+libformw-6.4_p20231125-r0
+libgcc-13.2.1_git20231014-r0
+libgcrypt-1.10.3-r0
+libgmpxx-6.3.0-r0
+libgomp-13.2.1_git20231014-r0
+libgpg-error-1.47-r2
+libidn2-2.3.4-r4
+libintl-0.22.3-r0
+libisoburn-1.5.6-r0
+libisofs-1.5.6-r0
+libjpeg-turbo-3.0.1-r0
+libksba-1.6.5-r0
+libldap-2.6.6-r1
+libltdl-2.4.7-r3
+libmagic-5.45-r1
+libmenuw-6.4_p20231125-r0
+libmnl-1.0.5-r2
+libmount-2.39.3-r0
+libmspack-0.11_alpha-r1
+libncurses++-6.4_p20231125-r0
+libncursesw-6.4_p20231125-r0
+libnfsidmap-2.6.4-r0
+libnftnl-1.2.6-r0
+libnl3-3.9.0-r0
+libpanelw-6.4_p20231125-r0
+libpcap-1.10.4-r1
+libpng-1.6.40-r0
+libressl-dev-3.8.2-r0
+libressl3.8-libcrypto-3.8.2-r0
+libressl3.8-libssl-3.8.2-r0
+libressl3.8-libtls-3.8.2-r0
+libretls-3.7.0-r2
+libsasl-2.1.28-r5
+libseccomp-2.5.5-r0
+libseccomp-dev-2.5.5-r0
+libseccomp-static-2.5.5-r0
 libslirp-4.7.0-r0
-libsmartcols-2.38.1-r0
-libssl3-3.0.7-r0
-libstdc++-12.2.1_git20220924-r4
-libstdc++-dev-12.2.1_git20220924-r4
-libtasn1-4.19.0-r0
-libtirpc-1.3.3-r0
-libtirpc-conf-1.3.3-r0
-libtirpc-dev-1.3.3-r0
-libtirpc-nokrb-1.3.3-r0
-libtool-2.4.7-r0
-libucontext-1.2-r0
-libucontext-dev-1.2-r0
-libunistring-1.1-r0
-libunwind-1.6.2-r0
-libunwind-dev-1.6.2-r0
-liburing-2.3-r0
-libuuid-2.38.1-r0
-libuv-1.44.2-r0
-libverto-0.3.2-r1
-libverto-dev-0.3.2-r1
-libverto-glib-0.3.2-r1
-libverto-libev-0.3.2-r1
-libverto-libevent-0.3.2-r1
-libwbclient-4.16.8-r0
-libxml2-2.10.3-r1
-linux-headers-5.19.5-r0
-linux-pam-1.5.2-r1
-llvm15-15.0.6-r0
-llvm15-dev-15.0.6-r0
-llvm15-libs-15.0.6-r0
-llvm15-static-15.0.6-r0
-llvm15-test-utils-15.0.6-r0
-logger-2.38.1-r0
-losetup-2.38.1-r0
-lsblk-2.38.1-r0
+libsmartcols-2.39.3-r0
+libssl3-3.1.4-r4
+libstdc++-13.2.1_git20231014-r0
+libstdc++-dev-13.2.1_git20231014-r0
+libtasn1-4.19.0-r2
+libtirpc-1.3.4-r0
+libtirpc-conf-1.3.4-r0
+libtirpc-dev-1.3.4-r0
+libtirpc-nokrb-1.3.4-r0
+libtool-2.4.7-r3
+libucontext-1.2-r2
+libucontext-dev-1.2-r2
+libunistring-1.1-r2
+libunwind-1.7.2-r1
+libunwind-dev-1.7.2-r1
+liburing-2.5-r1
+libuuid-2.39.3-r0
+libuv-1.47.0-r0
+libverto-0.3.2-r2
+libverto-dev-0.3.2-r2
+libverto-glib-0.3.2-r2
+libverto-libev-0.3.2-r2
+libverto-libevent-0.3.2-r2
+libwbclient-4.18.9-r0
+libxml2-2.11.6-r0
+libxtables-1.8.10-r3
+libxxhash-0.8.2-r2
+linux-headers-6.5-r0
+linux-pam-1.5.3-r7
+llvm17-17.0.5-r0
+llvm17-dev-17.0.5-r0
+llvm17-libs-17.0.5-r0
+llvm17-linker-tools-17.0.5-r0
+llvm17-static-17.0.5-r0
+llvm17-test-utils-17.0.5-r0
+llvm17-test-utils-pyc-17.0.5-r0
+logger-2.39.3-r0
+losetup-2.39.3-r0
+lsblk-2.39.3-r0
 lsscsi-0.32-r1
-luajit-2.1_p20210510-r3
-luajit-dev-2.1_p20210510-r3
-lvm2-2.03.17-r1
-lvm2-libs-2.03.17-r1
-lvm2-openrc-2.03.17-r1
-lz4-libs-1.9.4-r1
-lzip-1.23-r0
-lzo-2.10-r3
-m4-1.4.19-r1
-make-4.3-r1
-mcookie-2.38.1-r0
-mdev-conf-4.3-r0
-mkinitfs-3.7.0-r0
-mount-2.38.1-r0
-mpc1-1.2.1-r1
-mpc1-dev-1.2.1-r1
-mpdecimal-2.5.1-r1
-mpfr-dev-4.1.0-r0
-mpfr4-4.1.0-r0
-mtools-4.0.42-r0
-multipath-tools-0.9.3-r1
-multipath-tools-openrc-0.9.3-r1
-musl-1.2.3-r4
-musl-dev-1.2.3-r4
-musl-fts-1.2.7-r3
-musl-fts-dev-1.2.7-r3
-musl-utils-1.2.3-r4
-ncurses-dev-6.3_p20221119-r0
-ncurses-libs-6.3_p20221119-r0
-ncurses-terminfo-base-6.3_p20221119-r0
-nettle-3.8.1-r0
-nfs-utils-2.6.2-r0
-nfs-utils-openrc-2.6.2-r0
-nghttp2-libs-1.51.0-r0
-npth-1.6-r2
-numactl-2.0.16-r0
-oniguruma-6.9.8-r0
-open-iscsi-2.1.8-r0
-open-iscsi-libs-2.1.8-r0
-open-iscsi-openrc-2.1.8-r0
-open-isns-lib-0.102-r0
-open-vm-tools-12.1.0-r0
-open-vm-tools-deploypkg-12.1.0-r0
-open-vm-tools-guestinfo-12.1.0-r0
-open-vm-tools-openrc-12.1.0-r0
-open-vm-tools-static-12.1.0-r0
-open-vm-tools-vmbackup-12.1.0-r0
-openntpd-6.8_p1-r7
-openntpd-openrc-6.8_p1-r7
-openrc-0.45.2-r7
-openresolv-3.12.0-r1
-openssh-client-common-9.1_p1-r1
-openssh-client-default-9.1_p1-r1
-openssh-keygen-9.1_p1-r1
-openssh-server-9.1_p1-r1
-openssh-server-common-9.1_p1-r1
-openssl-3.0.7-r0
-openssl-dev-3.0.7-r0
-ovmf-0.0.202208-r0
-p11-kit-0.24.1-r1
-partx-2.38.1-r0
-patch-2.7.6-r8
-pcre-8.45-r2
-pcre2-10.42-r0
-pcsc-lite-libs-1.9.9-r0
-perl-5.36.0-r0
-perl-error-0.17029-r1
-perl-git-2.38.2-r0
-pigz-2.7-r0
-pinentry-1.2.1-r0
-pixman-0.42.2-r0
-pkgconf-1.9.3-r0
-popt-1.19-r0
-py3-capstone-4.0.2-r4
-py3-packaging-21.3-r2
-py3-parsing-3.0.9-r0
-py3-setuptools-65.6.0-r0
-python3-3.10.9-r1
-qemu-7.1.0-r7
-qemu-aarch64-7.1.0-r7
-qemu-arm-7.1.0-r7
-qemu-guest-agent-7.1.0-r7
-qemu-img-7.1.0-r7
-qemu-ppc64le-7.1.0-r7
-qemu-system-arm-7.1.0-r7
-qemu-system-x86_64-7.1.0-r7
-readline-8.2.0-r0
-rhash-libs-1.4.3-r1
-rpcbind-1.2.6-r1
-rpcbind-openrc-1.2.6-r1
-rsync-3.2.7-r0
-rsync-openrc-3.2.7-r0
-runuser-2.38.1-r0
-scanelf-1.3.5-r1
-sed-4.9-r0
-setpriv-2.38.1-r0
-sfdisk-2.38.1-r0
-sg3_utils-1.47-r0
-sgdisk-1.0.9-r2
-skalibs-2.12.0.1-r0
-slang-2.3.3-r0
-slang-dev-2.3.3-r0
-snappy-1.1.9-r4
-sntpc-0.9-r8
-sntpc-openrc-0.9-r8
-socat-1.7.4.4-r0
-sqlite-libs-3.40.1-r0
-squashfs-tools-4.5.1-r1
-ssl_client-1.35.0-r29
-strace-6.0-r0
-swig-4.0.2-r7
-syslinux-6.04_pre1-r11
-talloc-2.3.4-r0
-tar-1.34-r1
-tcl-8.6.12-r1
-tcpdump-4.99.1-r4
-tini-0.19.0-r1
-tzdata-2022f-r1
+luajit-2.1_p20230410-r3
+luajit-dev-2.1_p20230410-r3
+lvm2-2.03.23-r0
+lvm2-libs-2.03.23-r0
+lvm2-openrc-2.03.23-r0
+lz4-libs-1.9.4-r5
+lzip-1.23-r1
+lzo-2.10-r5
+m4-1.4.19-r3
+make-4.4.1-r2
+mcookie-2.39.3-r0
+mdev-conf-4.6-r0
+mkinitfs-3.9.0-r0
+mount-2.39.3-r0
+mpc1-1.3.1-r1
+mpc1-dev-1.3.1-r1
+mpdecimal-2.5.1-r2
+mpfr-dev-4.2.1-r0
+mpfr4-4.2.1-r0
+mtools-4.0.43-r1
+multipath-tools-0.9.7-r1
+multipath-tools-openrc-0.9.7-r1
+musl-1.2.4_git20230717-r4
+musl-dev-1.2.4_git20230717-r4
+musl-fts-1.2.7-r6
+musl-fts-dev-1.2.7-r6
+musl-obstack-1.2.3-r2
+musl-utils-1.2.4_git20230717-r4
+ncurses-dev-6.4_p20231125-r0
+ncurses-terminfo-base-6.4_p20231125-r0
+nettle-3.9.1-r0
+nfs-utils-2.6.4-r0
+nfs-utils-openrc-2.6.4-r0
+nghttp2-libs-1.58.0-r0
+npth-1.6-r4
+numactl-2.0.16-r4
+oniguruma-6.9.9-r0
+open-iscsi-2.1.9-r1
+open-iscsi-libs-2.1.9-r1
+open-iscsi-openrc-2.1.9-r1
+open-isns-lib-0.102-r1
+open-vm-tools-12.3.0-r0
+open-vm-tools-deploypkg-12.3.0-r0
+open-vm-tools-guestinfo-12.3.0-r0
+open-vm-tools-openrc-12.3.0-r0
+open-vm-tools-static-12.3.0-r0
+open-vm-tools-vmbackup-12.3.0-r0
+openntpd-6.8_p1-r9
+openntpd-openrc-6.8_p1-r9
+openrc-0.52.1-r2
+openresolv-3.13.2-r0
+openssh-client-common-9.6_p1-r0
+openssh-client-default-9.6_p1-r0
+openssh-keygen-9.6_p1-r0
+openssh-server-9.6_p1-r0
+openssh-server-common-9.6_p1-r0
+openssh-server-common-openrc-9.6_p1-r0
+openssl-3.1.4-r4
+openssl-dev-3.1.4-r4
+ovmf-0.0.202308-r0
+p11-kit-0.25.3-r0
+partx-2.39.3-r0
+patch-2.7.6-r10
+pcre2-10.42-r2
+pcsc-lite-libs-2.0.0-r2
+perl-5.38.2-r0
+perl-error-0.17029-r2
+perl-git-2.43.0-r0
+pigz-2.8-r0
+pinentry-1.2.1-r1
+pixman-0.42.2-r2
+pkgconf-2.1.0-r0
+popt-1.19-r3
+py3-capstone-5.0.1-r1
+py3-capstone-pyc-5.0.1-r1
+py3-packaging-23.2-r0
+py3-packaging-pyc-23.2-r0
+py3-parsing-3.1.1-r0
+py3-parsing-pyc-3.1.1-r0
+py3-setuptools-68.2.2-r0
+py3-setuptools-pyc-68.2.2-r0
+pyc-3.11.6-r1
+python3-3.11.6-r1
+python3-pyc-3.11.6-r1
+python3-pycache-pyc0-3.11.6-r1
+qemu-8.1.4-r0
+qemu-aarch64-8.1.4-r0
+qemu-arm-8.1.4-r0
+qemu-bridge-helper-8.1.4-r0
+qemu-guest-agent-8.1.4-r0
+qemu-guest-agent-openrc-8.1.4-r0
+qemu-img-8.1.4-r0
+qemu-ppc64le-8.1.4-r0
+qemu-system-arm-8.1.4-r0
+qemu-system-x86_64-8.1.4-r0
+readline-8.2.1-r2
+rhash-libs-1.4.4-r0
+rpcbind-1.2.6-r2
+rpcbind-openrc-1.2.6-r2
+rsync-3.2.7-r4
+rsync-openrc-3.2.7-r4
+runuser-2.39.3-r0
+scanelf-1.3.7-r2
+sed-4.9-r2
+setarch-2.39.3-r0
+setpriv-2.39.3-r0
+sfdisk-2.39.3-r0
+sg3_utils-1.47-r1
+sgdisk-1.0.9-r4
+skalibs-2.14.0.1-r0
+slang-2.3.3-r3
+slang-dev-2.3.3-r3
+snappy-1.1.10-r2
+sntpc-0.9-r11
+sntpc-openrc-0.9-r11
+socat-1.8.0.0-r0
+sqlite-libs-3.44.2-r0
+squashfs-tools-4.6.1-r1
+ssl_client-1.36.1-r15
+strace-6.6-r0
+swig-4.1.1-r5
+syslinux-6.04_pre1-r15
+talloc-2.4.1-r1
+tar-1.35-r2
+tcl-8.6.13-r1
+tcpdump-4.99.4-r1
+tini-0.19.0-r2
+tzdata-2023d-r0
 udev-init-scripts-35-r1
 udev-init-scripts-openrc-35-r1
-umount-2.38.1-r0
-userspace-rcu-0.13.2-r0
-util-linux-2.38.1-r0
-util-linux-dev-2.38.1-r0
-util-linux-misc-2.38.1-r0
-util-linux-openrc-2.38.1-r0
-utmps-libs-0.1.2.0-r1
-uuidgen-2.38.1-r0
-vde2-libs-2.3.3-r0
-vim-9.0.0999-r0
-wipefs-2.38.1-r0
-wireguard-tools-1.0.20210914-r1
-wireguard-tools-wg-1.0.20210914-r1
-wireguard-tools-wg-quick-1.0.20210914-r1
-wireless-tools-30_pre9-r2
-wpa_supplicant-2.10-r4
-wpa_supplicant-openrc-2.10-r4
-xfsprogs-6.0.0-r0
-xfsprogs-extra-6.0.0-r0
-xorriso-1.5.4-r2
-xxd-9.0.0999-r0
-xz-5.2.9-r0
-xz-dev-5.2.9-r0
-xz-libs-5.2.9-r0
-zfs-2.1.7-r0
-zfs-libs-2.1.7-r0
-zfs-openrc-2.1.7-r0
-zlib-1.2.13-r0
-zlib-dev-1.2.13-r0
-zlib-static-1.2.13-r0
-zstd-dev-1.5.2-r9
-zstd-libs-1.5.2-r9
+umount-2.39.3-r0
+unzip-6.0-r14
+userspace-rcu-0.14.0-r2
+util-linux-2.39.3-r0
+util-linux-dev-2.39.3-r0
+util-linux-misc-2.39.3-r0
+util-linux-openrc-2.39.3-r0
+utmps-libs-0.1.2.2-r0
+uuidgen-2.39.3-r0
+vde2-libs-2.3.3-r2
+vim-9.0.2127-r0
+vim-common-9.0.2127-r0
+wipefs-2.39.3-r0
+wireguard-tools-1.0.20210914-r3
+wireguard-tools-wg-1.0.20210914-r3
+wireguard-tools-wg-quick-1.0.20210914-r3
+wireless-tools-30_pre9-r4
+wireless-tools-libs-30_pre9-r4
+wpa_supplicant-2.10-r9
+wpa_supplicant-openrc-2.10-r9
+xfsprogs-6.5.0-r0
+xfsprogs-extra-6.5.0-r0
+xorriso-1.5.6-r0
+xxd-9.0.2127-r0
+xz-5.4.5-r0
+xz-dev-5.4.5-r0
+xz-libs-5.4.5-r0
+zfs-2.2.2-r0
+zfs-libs-2.2.2-r0
+zfs-openrc-2.2.2-r0
+zip-3.0-r12
+zlib-1.3.1-r0
+zlib-dev-1.3.1-r0
+zlib-static-1.3.1-r0
+zstd-1.5.5-r8
+zstd-dev-1.5.5-r8
+zstd-libs-1.5.5-r8
diff --git a/tools/containerd-dev/Dockerfile b/tools/containerd-dev/Dockerfile
index 594e22448..e852d2a72 100644
--- a/tools/containerd-dev/Dockerfile
+++ b/tools/containerd-dev/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as builder
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as builder
 
 
 # checkout and compile containerd
diff --git a/tools/go-compile/Dockerfile b/tools/go-compile/Dockerfile
index 2fb67075d..2e7f57e66 100644
--- a/tools/go-compile/Dockerfile
+++ b/tools/go-compile/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
diff --git a/tools/mkimage-iso-bios/Dockerfile b/tools/mkimage-iso-bios/Dockerfile
index 4f21c3437..910facfe6 100644
--- a/tools/mkimage-iso-bios/Dockerfile
+++ b/tools/mkimage-iso-bios/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 as mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/tools/mkimage-iso-efi-initrd/Dockerfile b/tools/mkimage-iso-efi-initrd/Dockerfile
index 7dd4a80a3..1e50ddd37 100644
--- a/tools/mkimage-iso-efi-initrd/Dockerfile
+++ b/tools/mkimage-iso-efi-initrd/Dockerfile
@@ -1,6 +1,6 @@
 FROM linuxkit/grub:292deb743d85eb79cbd5b163841db8ccd2500677 AS grub
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
   alpine-baselayout \
diff --git a/tools/mkimage-iso-efi/Dockerfile b/tools/mkimage-iso-efi/Dockerfile
index 98fc352a3..fc3673c2d 100644
--- a/tools/mkimage-iso-efi/Dockerfile
+++ b/tools/mkimage-iso-efi/Dockerfile
@@ -1,6 +1,6 @@
 FROM linuxkit/grub:292deb743d85eb79cbd5b163841db8ccd2500677 AS grub
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
   alpine-baselayout \
diff --git a/tools/mkimage-iso/Dockerfile b/tools/mkimage-iso/Dockerfile
index 24bdd201a..9bdca40d1 100644
--- a/tools/mkimage-iso/Dockerfile
+++ b/tools/mkimage-iso/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/tools/mkimage-qcow2-efi/Dockerfile b/tools/mkimage-qcow2-efi/Dockerfile
index 4e10803eb..27972697d 100644
--- a/tools/mkimage-qcow2-efi/Dockerfile
+++ b/tools/mkimage-qcow2-efi/Dockerfile
@@ -1,6 +1,6 @@
 FROM linuxkit/grub:292deb743d85eb79cbd5b163841db8ccd2500677 AS grub
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
   alpine-baselayout \
diff --git a/tools/mkimage-raw-bios/Dockerfile b/tools/mkimage-raw-bios/Dockerfile
index 839b12df1..7e5dd5ed0 100644
--- a/tools/mkimage-raw-bios/Dockerfile
+++ b/tools/mkimage-raw-bios/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
     alpine-baselayout \
diff --git a/tools/mkimage-raw-efi/Dockerfile b/tools/mkimage-raw-efi/Dockerfile
index c28a90164..7d847a460 100644
--- a/tools/mkimage-raw-efi/Dockerfile
+++ b/tools/mkimage-raw-efi/Dockerfile
@@ -1,6 +1,6 @@
 FROM linuxkit/grub:292deb743d85eb79cbd5b163841db8ccd2500677 AS grub
 
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
   alpine-baselayout \
diff --git a/tools/mkimage-rpi3/Dockerfile b/tools/mkimage-rpi3/Dockerfile
index b4c0c4b30..9cc712afc 100644
--- a/tools/mkimage-rpi3/Dockerfile
+++ b/tools/mkimage-rpi3/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 as build
+FROM linuxkit/alpine:c89ded458506dc402c349a18b757bc5634d6010a as build
 RUN apk add \
     bc \
     bison \
diff --git a/tools/mkimage-squashfs/Dockerfile b/tools/mkimage-squashfs/Dockerfile
index 458276381..b23693429 100644
--- a/tools/mkimage-squashfs/Dockerfile
+++ b/tools/mkimage-squashfs/Dockerfile
@@ -1,4 +1,4 @@
-FROM linuxkit/alpine:316c3f9d85c21fdd8bc7479e81d290f85bf60eb0 AS mirror
+FROM linuxkit/alpine:6584375f70524a4684f10e7155d91380420f5392 AS mirror
 RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
 RUN apk add --no-cache --initdb -p /out \
   alpine-baselayout \