fix: pin answer server image digest + fix taint key mismatch

Copilot review fixes:
- Pin answer server Docker image to SHA256 digest instead of :latest
  for reproducible builds
- Fix cmd_taint: ISO resources are keyed by version ("9") not node
  ("9a"), so taint was no-op. Now taints ISOs by version and VMs
  by node separately.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Clint Branham
2026-03-25 15:38:21 -05:00
parent a241714125
commit 7cb64811b7
2 changed files with 14 additions and 4 deletions
+3 -1
View File
@@ -2,7 +2,9 @@
resource "docker_container" "answer_server" {
name = "pvetest-answer-server"
image = "slothcroissant/proxmox-auto-installer-server:latest"
# Pin to digest for reproducibility. Update by pulling latest and running:
# docker inspect slothcroissant/proxmox-auto-installer-server:latest --format '{{index .RepoDigests 0}}'
image = "slothcroissant/proxmox-auto-installer-server@sha256:0f45d7bfe6e3cc76aa00fc578e40b80b9054e377db18a79122866fe5522bc7ed"
restart = "unless-stopped"
must_run = true
start = true