Merge pull request #3013 from w9n/cleanup

move pkg config from Dockerfile to build.yml

examples/aws.yml

@@ -5,20 +5,20 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx

examples/azure.yml

@@ -5,17 +5,17 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub

examples/cadvisor.yml

@@ -5,30 +5,30 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
       - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: ntpd
-    image: linuxkit/openntpd:v0.3
+    image: linuxkit/openntpd:9851e80f16e4292b12fbe97b9d7f1c3dd40d1ea2
 
   - name: docker
     image: docker:17.10.0-ce-dind
@@ -46,7 +46,7 @@ services:
       - /etc/docker/daemon.json:/etc/docker/daemon.json
     command: ["/usr/local/bin/docker-init", "/usr/local/bin/dockerd"]
   - name: cadvisor
-    image: linuxkit/cadvisor:v0.3
+    image: linuxkit/cadvisor:9a4b626e808c6a961bf17c8c3eb8adbe55f94e20
 files:
   - path: var/lib/docker
     directory: true

examples/docker-for-mac.yml

@@ -3,30 +3,30 @@ kernel:
   image: linuxkit/kernel:4.14.35
   cmdline: "console=ttyS0 page_poison=1"
 init:
-  - linuxkit/vpnkit-expose-port:v0.3 # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
+  - linuxkit/vpnkit-expose-port:4e2ea826aaefdd196c7473255654d06ad96c4c21 # install vpnkit-expose-port and vpnkit-iptables-wrapper on host
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   # support metadata for optional config in /run/config
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: binfmt
-    image: linuxkit/binfmt:v0.3
+    image: linuxkit/binfmt:aa7909fd14c251948a83edb5398b4fb7d5153ad1
   # Format and mount the disk image in /var/lib/docker
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib"]
   # make a swap file on the mounted disk
   - name: swap
-    image: linuxkit/swap:v0.3
+    image: linuxkit/swap:d4241eabbc9086d30e462bfa6bb952fd4e6b74eb
     command: ["/swap.sh", "--path", "/var/lib/swap", "--size", "1024M"]
   # mount-vpnkit mounts the 9p share used by vpnkit to coordinate port forwarding
   - name: mount-vpnkit
@@ -44,41 +44,41 @@ onboot:
         - /var:/host_var
     command: ["sh", "-c", "mv -v /host_var/log /host_var/lib && ln -vs /var/lib/log /host_var/log"]
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   # Enable acpi to shutdown on power events
   - name: acpid
-    image: linuxkit/acpid:v0.3
+    image: linuxkit/acpid:6c05004a07f4f9228aec89605d5c72b184695d2a
   # Enable getty for easier debugging
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
         - INSECURE=true
   # Run ntpd to keep time synchronised in the VM
   - name: ntpd
-    image: linuxkit/openntpd:v0.3
+    image: linuxkit/openntpd:9851e80f16e4292b12fbe97b9d7f1c3dd40d1ea2
   # VSOCK to unix domain socket forwarding. Forwards guest /var/run/docker.sock
   # to a socket on the host.
   - name: vsudd
-    image: linuxkit/vsudd:v0.3
+    image: linuxkit/vsudd:ef2fd68237c6fc1a3b97b37012ad81bf9643be4b
     binds:
         - /var/run:/var/run
     command: ["/vsudd", "-inport", "2376:unix:/var/run/docker.sock"]
   # vpnkit-forwarder forwards network traffic to/from the host via VSOCK port 62373. 
   # It needs access to the vpnkit 9P coordination share 
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:v0.3
+    image: linuxkit/vpnkit-forwarder:49b506c4dab8789fd42b216c35a4eb1cca503b32
     binds:
         - /var/vpnkit:/port
     net: host
     command: ["/vpnkit-forwarder", "-vsockPort", "62373"]
   # Monitor for image deletes and invoke a TRIM on the container filesystem
   - name: trim-after-delete
-    image: linuxkit/trim-after-delete:v0.3
+    image: linuxkit/trim-after-delete:9e62cea1246d66659bc1a74987f5f4c40e04de83
   # When the host resumes from sleep, force a clock resync
   - name: host-timesync-daemon
-    image: linuxkit/host-timesync-daemon:v0.3
+    image: linuxkit/host-timesync-daemon:921f623f1d12b7a79417370c4628752c495e7ee8
   # Run dockerd with the vpnkit userland proxy from the vpnkit-forwarder container.
   # Bind mounts /var/run to allow vsudd to connect to docker.sock, /var/vpnkit
   # for vpnkit coordination and /run/config/docker for the configuration file.

examples/docker.yml

@@ -5,28 +5,28 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: ntpd
-    image: linuxkit/openntpd:v0.3
+    image: linuxkit/openntpd:9851e80f16e4292b12fbe97b9d7f1c3dd40d1ea2
   - name: docker
     image: docker:17.09.0-ce-dind
     capabilities:

examples/gcp.yml

@@ -5,24 +5,24 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx

examples/getty.yml

@@ -5,21 +5,21 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     # to make insecure with passwordless root login, uncomment following lines
     #env:
     # - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)

examples/hostmount-writeable-overlay.yml

@@ -5,12 +5,12 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 onshutdown:
   - name: shutdown
@@ -18,7 +18,7 @@ onshutdown:
     command: ["/bin/echo", "so long and thanks for all the fish"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
     runtime:
@@ -30,7 +30,7 @@ services:
           destination: writeable-host-etc
           options: ["rw", "lowerdir=/etc", "upperdir=/run/hostetc/upper", "workdir=/run/hostetc/work"]
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

examples/influxdb-os.yml

@@ -5,14 +5,14 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: influxdb

examples/minimal.yml

@@ -7,11 +7,11 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
 trust:

examples/node_exporter.yml

@@ -7,15 +7,15 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: node_exporter
-    image: linuxkit/node_exporter:v0.3
+    image: linuxkit/node_exporter:693341bd019aeca0e9a6bf33bdbc5f46aa2bf2a1
 trust:
   org:
     - linuxkit

examples/openstack.yml

@@ -5,21 +5,21 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
     command: ["/usr/bin/metadata", "openstack"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx

examples/packet.arm64.yml

@@ -10,5 +10,5 @@ kernel:
   ucode: ""
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.3
+    image: linuxkit/modprobe:7605d92569d45df9e4a9fe4e12a777d2e7944976
     command: ["modprobe", "nicvf"]

examples/packet.yml

@@ -6,29 +6,29 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
-  - linuxkit/firmware:v0.3
+  - linuxkit/firmware:177575af191cf16e19c4989200e40f11422c3b32
 onboot:
   - name: rngd1
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
     command: ["/sbin/rngd", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
     command: ["/usr/bin/metadata", "packet"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub

examples/redis-os.yml

@@ -9,11 +9,11 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   # Currently redis:4.0.6-alpine has trust issue with multi-arch

examples/rt-for-vmware.yml

@@ -5,21 +5,21 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: open-vm-tools
-    image: linuxkit/open-vm-tools:v0.3
+    image: linuxkit/open-vm-tools:435f47c1a8c004b3626da21eb17fcebcc628714a
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

examples/sshd.yml

@@ -5,24 +5,24 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: rngd1
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
     command: ["/sbin/rngd", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
 files:
   - path: root/.ssh/authorized_keys
     source: ~/.ssh/id_rsa.pub

examples/swap.yml

@@ -5,30 +5,30 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/external"]
   - name: swap
-    image: linuxkit/swap:v0.3
+    image: linuxkit/swap:d4241eabbc9086d30e462bfa6bb952fd4e6b74eb
     # to use unencrypted swap, use:
     # command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
     command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
 trust:
   org:
     - linuxkit

examples/tpm.yml

@@ -5,22 +5,22 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: tss
-    image: linuxkit/tss:v0.3
+    image: linuxkit/tss:0f21e6d31c81a6eaa9f08638b87f678144ea9217
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)

examples/vmware.yml

@@ -5,19 +5,19 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

examples/vpnkit-forwarder.yml

@@ -7,7 +7,7 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: mount-vpnkit
     image: alpine:3.7
@@ -19,9 +19,9 @@ onboot:
     command: ["sh", "-c", "mkdir /host_var/vpnkit && mount -v -t 9p -o trans=virtio,dfltuid=1001,dfltgid=50,version=9p2000 port /host_var/vpnkit"]
 services:
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
   - name: vpnkit-forwarder
-    image: linuxkit/vpnkit-forwarder:v0.3
+    image: linuxkit/vpnkit-forwarder:49b506c4dab8789fd42b216c35a4eb1cca503b32
     binds:
         - /var/vpnkit:/port
     net: host

examples/vsudd-containerd.yml

@@ -7,11 +7,11 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: vsudd
-    image: linuxkit/vsudd:v0.3
+    image: linuxkit/vsudd:ef2fd68237c6fc1a3b97b37012ad81bf9643be4b
     binds:
         - /run/containerd/containerd.sock:/run/containerd/containerd.sock
     command: ["/vsudd",

examples/vultr.yml

@@ -5,24 +5,24 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: metadata
-    image: linuxkit/metadata:v0.3
+    image: linuxkit/metadata:be507a0718df8ed6733dfab1d6866672f446e8fd
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
     binds:
      - /run/config/ssh/authorized_keys:/root/.ssh/authorized_keys
   - name: nginx

examples/wireguard.yml

@@ -5,15 +5,15 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: wg0
-    image: linuxkit/ip:v0.3
+    image: linuxkit/ip:baf5dc379104f01356fb7ace881149a67d889e96
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -26,7 +26,7 @@ onboot:
       bindNS:
           net: /run/netns/wg0
   - name: wg1
-    image: linuxkit/ip:v0.3
+    image: linuxkit/ip:baf5dc379104f01356fb7ace881149a67d889e96
     net: new
     binds:
       - /etc/wireguard:/etc/wireguard
@@ -40,12 +40,12 @@ onboot:
           net: /run/netns/wg1
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
     net: /run/netns/wg1
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: nginx
     image: nginx:1.13.8-alpine
     net: /run/netns/wg0

pkg/acpid/Dockerfile

@@ -17,6 +17,3 @@ COPY --from=mirror /out/ /
 COPY --from=mirror2 /out/etc/acpi /etc/acpi
 
 CMD ["/sbin/acpid", "-f", "-d"]
-
-LABEL org.mobyproject.config='{"binds": ["/dev:/dev"], "pid": "host"}'
-

pkg/acpid/build.yml

@@ -1 +1,5 @@
 image: acpid
+config:
+  binds:
+  - /dev:/dev
+  pid: host

pkg/binfmt/Dockerfile

@@ -22,4 +22,3 @@ COPY --from=mirror /go/bin/binfmt usr/bin/binfmt
 COPY --from=mirror /binfmt_misc /binfmt_misc/
 COPY etc/binfmt.d/00_linuxkit.conf etc/binfmt.d/00_linuxkit.conf
 CMD ["/usr/bin/binfmt", "-dir", "/etc/binfmt.d/", "-mount", "/binfmt_misc"]
-LABEL org.mobyproject.config='{"binds": ["/proc/sys/fs/binfmt_misc:/binfmt_misc"], "readonly": true, "net": "new", "ipc": "new"}'

pkg/binfmt/build.yml

@@ -1,3 +1,9 @@
 image: binfmt
 arches:
   - amd64
+config:
+  binds:
+  - /proc/sys/fs/binfmt_misc:/binfmt_misc
+  readonly: true
+  net: new
+  ipc: new

pkg/cadvisor/Dockerfile

@@ -37,4 +37,3 @@ COPY --from=build /usr/bin/cadvisor /usr/bin/cadvisor
 COPY /waitfordocker.sh /usr/bin/waitfordocker.sh
 
 ENTRYPOINT ["/usr/bin/waitfordocker.sh", "/usr/bin/cadvisor", "-logtostderr", "--disable_metrics=disk,tcp,udp"]
-LABEL org.mobyproject.config='{"pid": "host", "binds": ["/var/lib/docker:/var/lib/docker:ro", "/var/run:/var/run", "/sys:/sys:ro", "/etc/resolv.conf:/etc/resolv.conf:ro"], "capabilities": ["all"]}'

pkg/cadvisor/build.yml

@@ -3,3 +3,12 @@ network: true
 arches:
   - amd64
   - arm64
+config:
+  pid: host
+  binds:
+    - /var/lib/docker:/var/lib/docker:ro
+    - /var/run:/var/run
+    - /sys:/sys:ro
+    - /etc/resolv.conf:/etc/resolv.conf:ro
+  capabilities:
+    - all

pkg/dhcpcd/Dockerfile

@@ -16,4 +16,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY /dhcpcd.conf /usr/ /
 CMD ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf"]
-LABEL org.mobyproject.config='{"binds": ["/run/resolvconf:/etc"], "capabilities": ["CAP_NET_ADMIN", "CAP_NET_BIND_SERVICE", "CAP_NET_RAW", "CAP_SYS_ADMIN"]}'

pkg/dhcpcd/build.yml

@@ -1 +1,9 @@
 image: dhcpcd
+config:
+  binds:
+    - /run/resolvconf:/etc
+  capabilities:
+    - CAP_NET_ADMIN
+    - CAP_NET_BIND_SERVICE
+    - CAP_NET_RAW
+    - CAP_SYS_ADMIN

pkg/extend/Dockerfile

@@ -30,4 +30,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY --from=build /go/bin/extend usr/bin/extend
 CMD ["/usr/bin/extend"]
-LABEL org.mobyproject.config='{"binds": ["/dev:/dev"], "capabilities": ["CAP_SYS_ADMIN", "CAP_MKNOD"], "net": "new", "ipc": "new"}'

pkg/extend/build.yml

@@ -1 +1,9 @@
 image: extend
+config:
+  binds:
+    - /dev:/dev
+  capabilities:
+    - CAP_SYS_ADMIN
+    - CAP_MKNOD
+  net: new
+  ipc: new

pkg/format/Dockerfile

@@ -30,4 +30,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY --from=build /go/bin/format usr/bin/format
 CMD ["/usr/bin/format"]
-LABEL org.mobyproject.config='{"binds": ["/dev:/dev"], "capabilities": ["CAP_SYS_ADMIN", "CAP_MKNOD"], "net": "new", "ipc": "new"}'

pkg/format/build.yml

@@ -1 +1,9 @@
 image: format
+config:
+  binds:
+    - /dev:/dev
+  capabilities:
+    - CAP_SYS_ADMIN
+    - CAP_MKNOD
+  net: new
+  ipc: new

pkg/getty/Dockerfile

@@ -32,4 +32,3 @@ COPY --from=mirror /out/ /
 COPY usr/ /usr/
 COPY etc/ /etc/
 CMD ["/usr/bin/rungetty.sh"]
-LABEL org.mobyproject.config='{"pid": "host", "net":"host", "binds": ["/etc/resolv.conf:/etc/resolv.conf", "/run:/run", "/tmp:/tmp", "/etc:/hostroot/etc", "/usr/bin/ctr:/usr/bin/ctr", "/usr/bin/runc:/usr/bin/runc", "/containers:/containers","/var/log:/var/log","/dev:/dev","/sys:/sys"], "capabilities": ["all"]}'

pkg/getty/build.yml

@@ -1 +1,17 @@
 image: getty
+config:
+  pid: host
+  net: host
+  binds:
+    - /etc/resolv.conf:/etc/resolv.conf
+    - /run:/run
+    - /tmp:/tmp
+    - /etc:/hostroot/etc
+    - /usr/bin/ctr:/usr/bin/ctr
+    - /usr/bin/runc:/usr/bin/runc
+    - /containers:/containers
+    - /var/log:/var/log
+    - /dev:/dev
+    - /sys:/sys
+  capabilities:
+    - all

pkg/host-timesync-daemon/Dockerfile

@@ -19,4 +19,3 @@ CMD []
 WORKDIR /
 COPY --from=mirror /go/bin/host-timesync-daemon /usr/bin/host-timesync-daemon
 CMD ["/usr/bin/host-timesync-daemon", "-port", "0xf3a4"]
-LABEL org.mobyproject.config='{"binds": [ "/dev/rtc0:/dev/rtc0" ], "capabilities": ["CAP_SYS_TIME"]}'

pkg/host-timesync-daemon/build.yml

@@ -2,3 +2,8 @@ image: host-timesync-daemon
 network: true
 arches:
   - amd64
+config:
+  binds:
+    - /dev/rtc0:/dev/rtc0
+  capabilities:
+    - CAP_SYS_TIME

pkg/ip/Dockerfile

@@ -24,4 +24,3 @@ ENTRYPOINT []
 CMD []
 WORKDIR /
 COPY --from=mirror /out/ /
-LABEL org.mobyproject.config='{"capabilities": ["CAP_NET_ADMIN", "CAP_NET_RAW"]}'

pkg/ip/build.yml

@@ -1,2 +1,6 @@
 image: ip
 network: true
+config:
+  capabilities:
+    - CAP_NET_ADMIN
+    - CAP_NET_RAW

pkg/mkimage/Dockerfile

@@ -20,4 +20,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY mkimage.sh /usr/bin/
 CMD ["mkimage.sh"]
-LABEL org.mobyproject.config='{"readonly": true, "capabilities": ["CAP_SYS_ADMIN", "CAP_MKNOD"], "binds": ["/dev:/dev"]}'

pkg/mkimage/build.yml

@@ -1,3 +1,10 @@
 image: mkimage
 arches:
   - amd64
+config:
+  readonly: true
+  capabilities:
+    - CAP_SYS_ADMIN
+    - CAP_MKNOD
+  binds:
+    - /dev:/dev

pkg/modprobe/Dockerfile

@@ -10,4 +10,3 @@ ENTRYPOINT []
 CMD []
 WORKDIR /
 COPY --from=mirror /out/ /
-LABEL org.mobyproject.config='{"binds": ["/lib/modules:/lib/modules", "/sys:/sys"], "capabilities": ["CAP_SYS_MODULE"]}'

pkg/modprobe/build.yml

@@ -1 +1,7 @@
 image: modprobe
+config:
+  binds:
+    - /lib/modules:/lib/modules
+    - /sys:/sys
+  capabilities:
+    - CAP_SYS_MODULE

pkg/mount/Dockerfile

@@ -24,4 +24,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY --from=build /go/bin/mountie usr/bin/mountie
 CMD ["/usr/bin/mountie"]
-LABEL org.mobyproject.config='{"binds": ["/dev:/dev", "/var:/var:rshared,rbind", "/:/hostroot"], "capabilities": ["CAP_SYS_ADMIN"], "rootfsPropagation": "shared", "net": "new", "ipc": "new"}'

pkg/mount/build.yml

@@ -1 +1,11 @@
 image: mount
+config:
+  binds:
+    - /dev:/dev
+    - /var:/var:rshared,rbind
+    - /:/hostroot
+  capabilities:
+    - CAP_SYS_ADMIN
+  rootfsPropagation: shared
+  net: new
+  ipc: new

pkg/node_exporter/Dockerfile

@@ -23,5 +23,3 @@ ENTRYPOINT ["/bin/node_exporter", "--path.procfs",  "/host/proc", \
             "--path.sysfs",  "/host/sys", \
             "--collector.filesystem.ignored-mount-points", \
             "^/(sys|proc|dev|host|etc)($|/)"]
-LABEL org.mobyproject.config='{"pid": "host", "binds": ["/proc:/host/proc", "/sys:/host/sys", "/:/rootfs"], "capabilities": ["all"]}'
-

pkg/node_exporter/build.yml

@@ -1,2 +1,10 @@
 image: node_exporter
 network: true
+config:
+  pid: host
+  binds:
+    - /proc:/host/proc
+    - /sys:/host/sys
+    - /:/rootfs
+  capabilities:
+    - all

pkg/open-vm-tools/Dockerfile

@@ -15,5 +15,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY scripts /etc/vmware-tools/scripts
 CMD ["/usr/bin/vmtoolsd"]
-
-LABEL org.mobyproject.config='{"pid": "host", "capabilities": ["CAP_SYS_BOOT"]}'

pkg/open-vm-tools/build.yml

@@ -1,3 +1,7 @@
 image: open-vm-tools
 arches:
   - amd64
+config:
+  pid: host
+  capabilities:
+    - CAP_SYS_BOOT

pkg/openntpd/Dockerfile

@@ -16,4 +16,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY etc/ /etc/
 CMD ["/usr/sbin/ntpd", "-d", "-s"]
-LABEL org.mobyproject.config='{"binds": ["/etc/resolv.conf:/etc/resolv.conf"], "capabilities": ["CAP_SYS_TIME", "CAP_SYS_NICE", "CAP_SYS_CHROOT", "CAP_SETUID", "CAP_SETGID"]}'

pkg/openntpd/build.yml

@@ -1 +1,10 @@
 image: openntpd
+config:
+  binds:
+    - /etc/resolv.conf:/etc/resolv.conf
+  capabilities:
+    - CAP_SYS_TIME
+    - CAP_SYS_NICE
+    - CAP_SYS_CHROOT
+    - CAP_SETUID
+    - CAP_SETGID

pkg/qemu-ga/Dockerfile

@@ -10,4 +10,3 @@ WORKDIR /
 ENTRYPOINT []
 COPY --from=build /out /
 CMD ["/usr/bin/qemu-ga", "-p", "/dev/vport0p1"]
-LABEL org.mobyproject.config='{"net": "host"}'

pkg/qemu-ga/build.yml

@@ -1 +1,3 @@
 image: qemu-ga
+config:
+  net: host

pkg/rngd/Dockerfile

@@ -15,4 +15,3 @@ CMD []
 WORKDIR /
 COPY --from=mirror /go/bin/rngd /sbin/rngd
 CMD ["/sbin/rngd"]
-LABEL org.mobyproject.config='{"capabilities": ["CAP_SYS_ADMIN"], "oomScoreAdj": -800, "readonly": true, "net": "new", "ipc": "new"}'

pkg/rngd/build.yml

@@ -1 +1,8 @@
 image: rngd
+config:
+  capabilities:
+    - CAP_SYS_ADMIN
+  oomScoreAdj: -800
+  readonly: true
+  net: new
+  ipc: new

pkg/sshd/Dockerfile

@@ -22,4 +22,3 @@ COPY etc/ /etc/
 COPY usr/ /usr/
 RUN mkdir -p /etc/ssh /root/.ssh && chmod 0700 /root/.ssh
 CMD ["/sbin/tini", "/usr/bin/ssh.sh"]
-LABEL org.mobyproject.config='{"pid": "host", "binds": ["/root/.ssh:/root/.ssh", "/etc/resolv.conf:/etc/resolv.conf", "/run:/run", "/tmp:/tmp", "/etc:/hostroot/etc", "/usr/bin/ctr:/usr/bin/ctr", "/usr/bin/runc:/usr/bin/runc", "/containers:/containers","/var/log:/var/log","/dev:/dev","/sys:/sys"], "capabilities": ["all"]}'

pkg/sshd/build.yml

@@ -1 +1,17 @@
 image: sshd
+config:
+  pid: host
+  binds:
+    - /root/.ssh:/root/.ssh
+    - /etc/resolv.conf:/etc/resolv.conf
+    - /run:/run
+    - /tmp:/tmp
+    - /etc:/hostroot/etc
+    - /usr/bin/ctr:/usr/bin/ctr
+    - /usr/bin/runc:/usr/bin/runc
+    - /containers:/containers
+    - /var/log:/var/log
+    - /dev:/dev
+    - /sys:/sys
+  capabilities:
+    - all

pkg/swap/Dockerfile

@@ -16,4 +16,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY /swap.sh .
 ENTRYPOINT ["swap.sh"]
-LABEL org.mobyproject.config='{"binds": ["/dev:/dev", "/var:/var"], "capabilities": ["CAP_SYS_ADMIN", "CAP_MKNOD"], "net": "new", "ipc": "new"}'

pkg/swap/build.yml

@@ -1 +1,10 @@
 image: swap
+config:
+  binds:
+    - /dev:/dev
+    - /var:/var
+  capabilities:
+    - CAP_SYS_ADMIN
+    - CAP_MKNOD
+  net: new
+  ipc: new

pkg/sysfs/Dockerfile

@@ -13,4 +13,3 @@ WORKDIR /
 COPY --from=mirror /go/bin/sysfs /usr/bin/sysfs
 COPY etc/ /etc/
 CMD ["/usr/bin/sysfs"]
-LABEL org.mobyproject.config='{"net": "new", "ipc": "new"}'

pkg/sysfs/build.yml

@@ -1 +1,4 @@
 image: sysfs
+config:
+  net: new
+  ipc: new

pkg/trim-after-delete/Dockerfile

@@ -23,4 +23,3 @@ WORKDIR /
 COPY --from=mirror /out/ /
 COPY --from=mirror /go/bin/trim-after-delete /usr/bin/trim-after-delete
 CMD ["/usr/bin/trim-after-delete", "--", "/sbin/fstrim", "/var/lib/docker"]
-LABEL org.mobyproject.config='{"binds": ["/var/run:/var/run", "/var/lib/docker:/var/lib/docker"], "capabilities": ["CAP_SYS_ADMIN"]}'

pkg/trim-after-delete/build.yml

@@ -1 +1,7 @@
 image: trim-after-delete
+config:
+  binds:
+    - /var/run:/var/run
+    - /var/lib/docker:/var/lib/docker
+  capabilities:
+    - CAP_SYS_ADMIN

pkg/tss/Dockerfile

@@ -61,4 +61,3 @@ RUN busybox chmod 0644 /etc/passwd /etc/group && \
     busybox rm /bin/busybox /bin/sh
 
 CMD ["/sbin/tcsd","-f"]
-LABEL org.mobyproject.config='{"pid": "host", "net":"host", "binds": ["/dev:/dev"], "capabilities": ["all"]}'

pkg/tss/build.yml

@@ -2,3 +2,10 @@ image: tss
 network: true
 arches:
   - amd64
+config:
+  pid: host
+  net: host
+  binds:
+    - /dev:/dev
+  capabilities:
+    - all

projects/compose/compose-dynamic.yml

@@ -5,25 +5,25 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: ntpd
-    image: linuxkit/openntpd:v0.3
+    image: linuxkit/openntpd:9851e80f16e4292b12fbe97b9d7f1c3dd40d1ea2
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:

projects/compose/compose-static.yml

@@ -5,25 +5,25 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: ntpd
-    image: linuxkit/openntpd:v0.3
+    image: linuxkit/openntpd:9851e80f16e4292b12fbe97b9d7f1c3dd40d1ea2
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:

projects/ima-namespace/ima-namespace.yml

@@ -5,17 +5,17 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
   - linuxkit/ima-utils:dfeb3896fd29308b80ff9ba7fe5b8b767e40ca29
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

projects/logging/examples/logging.yml

@@ -2,20 +2,20 @@ kernel:
   image: linuxkit/kernel:4.14.35
   cmdline: "console=ttyS0 console=tty0 page_poison=1"
 init:
-  - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89 # with runc, logwrite, startmemlogd
+  - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
   - linuxkit/memlogd:9b5834189f598f43c507f6938077113906f51012
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

projects/memorizer/memorizer.yml

@@ -7,11 +7,11 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
 trust:

projects/miragesdk/examples/fdd.yml

@@ -5,20 +5,20 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
   - samoht/fdd
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
 files:
   - path: etc/init.d/020-fdd-init
     mode: "0700"

projects/miragesdk/examples/mirage-dhcp.yml

@@ -7,7 +7,7 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcp-client
     image: miragesdk/dhcp-client:22aa9d527820534295a8cd59901c0c5197af6585
     net: host
@@ -28,9 +28,9 @@ onboot:
      - /lib:/lib     # for ifconfig
 services:
   - name: sshd
-    image: linuxkit/sshd:v0.3
+    image: linuxkit/sshd:8f11ee09b101ab7f41c7a6409a8d7a8d49957fbb
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
 files:

projects/okernel/examples/okernel_simple.yaml

@@ -5,15 +5,15 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
 services:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
 trust:

projects/shiftfs/shiftfs.yml

@@ -5,20 +5,20 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
     env:
      - INSECURE=true
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: nginx
     image: nginx:1.13.8-alpine
     capabilities:

test/cases/000_build/000_formats/test.yml

@@ -6,7 +6,7 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 trust:
   org:

test/cases/010_platforms/010_hyperkit/010_acpi/test.yml

@@ -7,7 +7,7 @@ init:
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
 services:
   - name: acpid
-    image: linuxkit/acpid:v0.3
+    image: linuxkit/acpid:6c05004a07f4f9228aec89605d5c72b184695d2a
 trust:
   org:
     - linuxkit

test/cases/030_security/000_docker-bench/test.yml

@@ -5,22 +5,22 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: sysfs
-    image: linuxkit/sysfs:v0.3
+    image: linuxkit/sysfs:98b340d360541f1e1e62bc30b62ab6a7e3dc9280
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
 services:
   - name: rngd
-    image: linuxkit/rngd:v0.3
+    image: linuxkit/rngd:429e1308b8cad9dbe04b7a91fcebec17ee6f7591
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
   - name: docker
     image: docker:17.07.0-ce-dind
     capabilities:

test/cases/040_packages/002_binfmt/test.yml

@@ -6,7 +6,7 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: binfmt
-    image: linuxkit/binfmt:v0.3
+    image: linuxkit/binfmt:aa7909fd14c251948a83edb5398b4fb7d5153ad1
   - name: test
     image: alpine:3.7
     binds:

test/cases/040_packages/003_ca-certificates/test.yml

@@ -4,7 +4,7 @@ kernel:
 init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: test
     image: alpine:3.7

test/cases/040_packages/003_containerd/test.yml

@@ -5,17 +5,17 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib"]
   - name: test
     image: linuxkit/test-containerd:8b99385a8b21b238c0c9db0af102d5b54bbe324e

test/cases/040_packages/004_dhcpcd/test.yml

@@ -6,7 +6,7 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/000_ext4/test-create.yml

@@ -6,9 +6,9 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/000_ext4/test.yml

@@ -6,9 +6,9 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: extend
-    image: linuxkit/extend:v0.3
+    image: linuxkit/extend:d9f58e40ed6f474757da6554dc214a0812f099df
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/001_btrfs/test-create.yml

@@ -6,13 +6,13 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.3
+    image: linuxkit/modprobe:7605d92569d45df9e4a9fe4e12a777d2e7944976
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/001_btrfs/test.yml

@@ -6,13 +6,13 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.3
+    image: linuxkit/modprobe:7605d92569d45df9e4a9fe4e12a777d2e7944976
     command: ["modprobe", "btrfs"]
   - name: extend
-    image: linuxkit/extend:v0.3
+    image: linuxkit/extend:d9f58e40ed6f474757da6554dc214a0812f099df
     command: ["/usr/bin/extend", "-type", "btrfs"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/002_xfs/test-create.yml

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/005_extend/002_xfs/test.yml

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: extend
-    image: linuxkit/extend:v0.3
+    image: linuxkit/extend:d9f58e40ed6f474757da6554dc214a0812f099df
     command: ["/usr/bin/extend", "-type", "xfs"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/000_auto/test.yml

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/001_by_label/test.yml

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-label", "docker"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/002_by_name/test.yml.in

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "@DEVICE@"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "-device", "@DEVICE@1", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/003_btrfs/test.yml

@@ -6,13 +6,13 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: modprobe
-    image: linuxkit/modprobe:v0.3
+    image: linuxkit/modprobe:7605d92569d45df9e4a9fe4e12a777d2e7944976
     command: ["modprobe", "btrfs"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-type", "btrfs" ]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/004_xfs/test.yml

@@ -6,10 +6,10 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-type", "xfs" ]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "/var/lib/docker"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/006_format_mount/005_by_device_force/test.yml

@@ -6,19 +6,19 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sda"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-verbose", "-type", "ext4", "/dev/sdb"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-verbose", "-type", "xfs", "/dev/sda"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-verbose", "-force", "-type", "xfs", "/dev/sdb"]
   - name: test
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     binds:
       - /check.sh:/check.sh
     command: ["sh", "./check.sh"]

test/cases/040_packages/006_format_mount/010_multiple/test.yml

@@ -6,16 +6,16 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-label", "docker"]
   - name: format
-    image: linuxkit/format:v0.3
+    image: linuxkit/format:d24885a226c42a40f7ed44dd3789a6a035254d98
     command: ["/usr/bin/format", "-label", "foo"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "-label", "docker", "/var/lib/docker"]
   - name: mount
-    image: linuxkit/mount:v0.3
+    image: linuxkit/mount:763e67d733342281f3bdc55d7208b9c442837afe
     command: ["/usr/bin/mountie", "-label", "foo", "/var/foo"]
   - name: test
     image: alpine:3.7

test/cases/040_packages/007_getty-containerd/test.yml

@@ -5,14 +5,14 @@ init:
   - linuxkit/init:d0bf64f4cea42bea71e7d8f8832ba497bb822e89
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
   - linuxkit/containerd:100d0d046c5061d75ee43e4ac5017a759109cae4
-  - linuxkit/ca-certificates:v0.3
+  - linuxkit/ca-certificates:fb5c7bf842a330f5b47cdf71f950fe0c85f4a772
 onboot:
   - name: dhcpcd
-    image: linuxkit/dhcpcd:v0.3
+    image: linuxkit/dhcpcd:01069780f536da8eb7745df7478a97253403b63d
     command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
 services:
   - name: getty
-    image: linuxkit/getty:v0.3
+    image: linuxkit/getty:b286a610ccbebc45251f3a9df3619d76318e2244
 files:
   - path: etc/getty.shadow
     # sample sets password for root to "abcdefgh" (without quotes)

test/cases/040_packages/013_mkimage/mkimage.yml

@@ -6,7 +6,7 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: mkimage
-    image: linuxkit/mkimage:v0.3
+    image: linuxkit/mkimage:b06b6487f585efef71d5a99a93d36301842a94cf
   - name: poweroff
     image: linuxkit/poweroff:5740687bf0a6a0480922c0f59b3a4ca77c866cae
 trust:

test/cases/040_packages/019_sysctl/test.yml

@@ -6,7 +6,7 @@ init:
   - linuxkit/runc:acba8886e4b1318457c711700f695a02fef9493d
 onboot:
   - name: sysctl
-    image: linuxkit/sysctl:v0.3
+    image: linuxkit/sysctl:b51c3da02bc2fc9a53f699efc51f650ac17ffac8
   - name: test
     image: alpine:3.7
     net: host