From 85f248be3930a9112d04355ff8b46bd1e9fdea5f Mon Sep 17 00:00:00 2001 From: Julian Sommer <115516918+juliansommer@users.noreply.github.com> Date: Wed, 20 May 2026 09:48:26 +1000 Subject: [PATCH] chore: bump debian and ubuntu images --- .../install-airgapped/README.md | 2 +- docs/security/network-connections/README.md | 4 +-- scripts/iac/proxmox/README.md | 2 +- spinifex/utils/images.go | 31 +++++++------------ spinifex/utils/utils_test.go | 2 +- 5 files changed, 17 insertions(+), 24 deletions(-) diff --git a/docs/getting-started/install-airgapped/README.md b/docs/getting-started/install-airgapped/README.md index 3040430e8..196a766d1 100644 --- a/docs/getting-started/install-airgapped/README.md +++ b/docs/getting-started/install-airgapped/README.md @@ -74,7 +74,7 @@ Mirror the cloud image you intend to run as guest VMs: ```bash mkdir -p images -curl -fsSL "https://cloud.debian.org/images/cloud/trixie/20260501-2465/debian-13-genericcloud-amd64-20260501-2465.qcow2" \ +curl -fsSL "https://cloud.debian.org/images/cloud/trixie/20260518-2482/debian-13-genericcloud-amd64-20260518-2482.qcow2" \ -o images/debian-13-amd64.qcow2 ``` diff --git a/docs/security/network-connections/README.md b/docs/security/network-connections/README.md index 57e943f56..e0cd17cd1 100644 --- a/docs/security/network-connections/README.md +++ b/docs/security/network-connections/README.md @@ -105,8 +105,8 @@ Spinifex nodes initiate a small, fixed set of outbound connections. | Destination | Purpose | Protocol | Verification | |-------------|---------|----------|--------------| -| `https://cloud.debian.org/images/cloud/trixie/20260501-2465` | Debian 13 cloud image download | HTTPS | TLS + checksum verification | -| `https://cloud-images.ubuntu.com/resolute/current` | Ubuntu 26.04 LTS cloud image download | HTTPS | TLS + checksum verification | +| `https://cloud.debian.org/images/cloud/trixie/` | Debian 13 cloud image download | HTTPS | TLS + checksum verification | +| `https://cloud-images.ubuntu.com/resolute/` | Ubuntu 26.04 LTS cloud image download | HTTPS | TLS + checksum verification | | `https://d2yp8ipz5jfqcw.cloudfront.net` | Alpine image for managed HAProxy load-balancer | HTTPS | TLS + checksum verification | | `https://install.mulgadc.com/install` | One-shot install telemetry POST on `spx admin init` / `join`. | HTTPS | TLS | diff --git a/scripts/iac/proxmox/README.md b/scripts/iac/proxmox/README.md index 86873a2be..4057290d4 100644 --- a/scripts/iac/proxmox/README.md +++ b/scripts/iac/proxmox/README.md @@ -10,7 +10,7 @@ OpenTofu/Terraform templates for provisioning Spinifex development clusters on P - SSH access for a `terraform` user on each node - Debian 13 cloud image uploaded to `local:iso/` on each node - SSH keypair for cloud-init VM access -- A hardcoded Debian ISO is used, which needs to be pre-installed on each Proxmox host ("debian-13-genericcloud-amd64-20260501-2465.img") https://cloud.debian.org/images/cloud/trixie/20260501-2465/debian-13-genericcloud-amd64-20260501-2465.qcow2 +- A hardcoded Debian ISO is used, which needs to be pre-installed on each Proxmox host ("debian-13-genericcloud-amd64-20260518-2482.img") https://cloud.debian.org/images/cloud/trixie/20260518-2482/debian-13-genericcloud-amd64-20260518-2482.qcow2 ## Quick Start (spinifex-test.sh) diff --git a/spinifex/utils/images.go b/spinifex/utils/images.go index 0f6cc677a..8533e3718 100644 --- a/spinifex/utils/images.go +++ b/spinifex/utils/images.go @@ -266,7 +266,6 @@ type Images struct { Checksum string `json:"checksum"` ChecksumType string `json:"checksum_type"` BootMode string `json:"boot_mode"` - Starred bool `json:"starred"` // Tags are copied onto the imported AMI's AMIMetadata.Tags so the UI // can filter/classify the image. Used to mark system-owned AMIs // (e.g. the LB/HAProxy image) via spinifex:managed-by. @@ -282,12 +281,11 @@ var AvailableImages = map[string]Images{ Version: "13", Arch: "x86_64", Platform: "Linux/UNIX", - CreatedAt: time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC), - URL: "https://cloud.debian.org/images/cloud/trixie/20260501-2465/debian-13-genericcloud-amd64-20260501-2465.tar.xz", - Checksum: "https://cloud.debian.org/images/cloud/trixie/20260501-2465/SHA512SUMS", + CreatedAt: time.Date(2026, 5, 18, 0, 0, 0, 0, time.UTC), + URL: "https://cloud.debian.org/images/cloud/trixie/20260518-2482/debian-13-genericcloud-amd64-20260518-2482.tar.xz", + Checksum: "https://cloud.debian.org/images/cloud/trixie/20260518-2482/SHA512SUMS", ChecksumType: "sha512", BootMode: "bios", - Starred: true, }, "debian-13-arm64": { @@ -297,12 +295,11 @@ var AvailableImages = map[string]Images{ Version: "13", Arch: "arm64", Platform: "Linux/UNIX", - CreatedAt: time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC), - URL: "https://cloud.debian.org/images/cloud/trixie/20260501-2465/debian-13-genericcloud-arm64-20260501-2465.tar.xz", - Checksum: "https://cloud.debian.org/images/cloud/trixie/20260501-2465/SHA512SUMS", + CreatedAt: time.Date(2026, 5, 18, 0, 0, 0, 0, time.UTC), + URL: "https://cloud.debian.org/images/cloud/trixie/20260518-2482/debian-13-genericcloud-arm64-20260518-2482.tar.xz", + Checksum: "https://cloud.debian.org/images/cloud/trixie/20260518-2482/SHA512SUMS", ChecksumType: "sha512", BootMode: "bios", - Starred: true, }, "ubuntu-26.04-x86_64": { @@ -312,12 +309,11 @@ var AvailableImages = map[string]Images{ Version: "26.04", Arch: "x86_64", Platform: "Linux/UNIX", - CreatedAt: time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC), - URL: "https://cloud-images.ubuntu.com/resolute/current/resolute-server-cloudimg-amd64.img", - Checksum: "https://cloud-images.ubuntu.com/resolute/current/SHA256SUMS", + CreatedAt: time.Date(2026, 4, 21, 0, 0, 0, 0, time.UTC), + URL: "https://cloud-images.ubuntu.com/resolute/20260421/resolute-server-cloudimg-amd64.img", + Checksum: "https://cloud-images.ubuntu.com/resolute/20260421/SHA256SUMS", ChecksumType: "sha256", BootMode: "bios", - Starred: false, }, "ubuntu-26.04-arm64": { @@ -327,12 +323,11 @@ var AvailableImages = map[string]Images{ Version: "26.04", Arch: "arm64", Platform: "Linux/UNIX", - CreatedAt: time.Date(2026, 5, 1, 0, 0, 0, 0, time.UTC), - URL: "https://cloud-images.ubuntu.com/resolute/current/resolute-server-cloudimg-arm64.img", - Checksum: "https://cloud-images.ubuntu.com/resolute/current/SHA256SUMS", + CreatedAt: time.Date(2026, 4, 21, 0, 0, 0, 0, time.UTC), + URL: "https://cloud-images.ubuntu.com/resolute/20260421/resolute-server-cloudimg-arm64.img", + Checksum: "https://cloud-images.ubuntu.com/resolute/20260421/SHA256SUMS", ChecksumType: "sha256", BootMode: "bios", - Starred: false, }, "alpine-3.22.2-x86_64": { @@ -347,7 +342,6 @@ var AvailableImages = map[string]Images{ Checksum: "https://dl-cdn.alpinelinux.org/alpine/v3.22/releases/cloud/generic_alpine-3.22.2-x86_64-bios-cloudinit-r0.qcow2.sha512", ChecksumType: "sha512", BootMode: "bios", - Starred: false, }, /* @@ -365,7 +359,6 @@ var AvailableImages = map[string]Images{ Checksum: "https://dl-cdn.alpinelinux.org/alpine/v3.22/releases/cloud/gcp_alpine-3.22.2-aarch64-uefi-cloudinit-metal-r0.raw.tar.gz.sha512", ChecksumType: "sha512", BootMode: "uefi", - Starred: false, }, */ diff --git a/spinifex/utils/utils_test.go b/spinifex/utils/utils_test.go index 083c9f352..8eaf7b244 100644 --- a/spinifex/utils/utils_test.go +++ b/spinifex/utils/utils_test.go @@ -1253,7 +1253,7 @@ func trustTestServer(t *testing.T, srv *httptest.Server) { } func TestVerifyImageChecksum(t *testing.T) { - const debianName = "debian-13-genericcloud-amd64-20260501-2465.tar.xz" + const debianName = "debian-13-genericcloud-amd64-20260518-2482.tar.xz" const ubuntuName = "resolute-server-cloudimg-amd64.img" const alpineName = "alb-alpine-3.21.6-x86_64.raw"