Pin a Docker Image to a Specific Version

It may happen that we update the images behind the tags. Such updates usually include security updates of system dependencies that should not change the functionality of Flower. However, if you want to ensure that you use a fixed version of the Docker image in your deployments, you can specify the digest of the image instead of the tag.

Example

The following command returns the current image digest referenced by the superlink:1.12.0 tag:

$ docker pull flwr/superlink:1.12.0
$ docker inspect --format='{{index .RepoDigests 0}}' flwr/superlink:1.12.0

This will output

flwr/superlink@sha256:|stable__flwr_superlink_docker_digest|

Next, we can pin the digest when running a new SuperLink container:

$ docker run \
     --rm flwr/superlink@sha256:|latest_version_docker_sha| \
     [OPTIONS]