From cc932ce96c14e7230dd4d06993967c1526169326 Mon Sep 17 00:00:00 2001 From: Beraldo Leal Date: Tue, 14 Jul 2026 14:31:28 -0400 Subject: [PATCH] Pin veritas to exact commit hash for v0.1.1 Using the commit hash instead of the tag name ensures Docker layer cache is invalidated when the tag is moved to a new commit. Assisted-by: Claude Sonnet 4.6 (1M context) --- Containerfile | 2 +- Containerfile.ubi | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Containerfile b/Containerfile index 90b959c..5b10dfb 100644 --- a/Containerfile +++ b/Containerfile @@ -122,7 +122,7 @@ RUN curl -sL https://mirror.openshift.com/pub/openshift-v4/clients/ocp/stable/op # Install veritas with SNP and TDX support. # Base install covers TDX (uses tdx-measure binary); [snp] extra adds sev-snp-measure for SNP -ARG VERITAS_REF=v0.1.1 +ARG VERITAS_REF=48d72f7b3b9dc3ee14b9104b20ad3207cf425fbd RUN pip install --no-cache-dir \ "veritas[snp] @ git+https://github.com/confidential-devhub/veritas.git@${VERITAS_REF}" diff --git a/Containerfile.ubi b/Containerfile.ubi index b92283b..61a6f6c 100644 --- a/Containerfile.ubi +++ b/Containerfile.ubi @@ -133,7 +133,7 @@ RUN curl -sL https://mirror.openshift.com/pub/openshift-v4/clients/ocp/stable/op # Install veritas with SNP and TDX support. # Base install covers TDX (uses tdx-measure binary); [snp] extra adds sev-snp-measure for SNP -ARG VERITAS_REF=v0.1.1 +ARG VERITAS_REF=48d72f7b3b9dc3ee14b9104b20ad3207cf425fbd RUN pip install --no-cache-dir \ "veritas[snp] @ git+https://github.com/confidential-devhub/veritas.git@${VERITAS_REF}"