16 lines
871 B
Docker
16 lines
871 B
Docker
# Incident-only. Caller checks this local tag's immutable image ID against the
|
|
# adjacent base lock before and after build, and checks unchanged base layers.
|
|
FROM youyidian-3d-material:material-base-b28607f43d14
|
|
USER root
|
|
COPY --chown=root:root verified-plan.json /tmp/material-hotfix-plan.json
|
|
COPY --chown=root:root verify.cjs /tmp/material-hotfix-verify.cjs
|
|
RUN node /tmp/material-hotfix-verify.cjs before
|
|
COPY --chown=root:root overlay/ /app/
|
|
ARG VCS_REF
|
|
LABEL org.opencontainers.image.revision=$VCS_REF
|
|
LABEL com.youyidian.material-hotfix.source-commit=4de34cd3520999e127a6fc5fc7e3e88ac6f12780
|
|
LABEL com.youyidian.material-hotfix.base-image=sha256:b28607f43d14609ec21ac8979a53889f002d6661b4ab80c69b8b67acdf9cc02b
|
|
RUN VCS_REF="$VCS_REF" node /tmp/material-hotfix-verify.cjs after && \
|
|
rm /tmp/material-hotfix-plan.json /tmp/material-hotfix-verify.cjs
|
|
USER nextjs
|