Pin a Docker Image to a Specific Version

It may happen that we update the images behind the tags. Such updates usually include security updates of system dependencies that should not change the functionality of Flower. However, if you want to ensure that you use a fixed version of the Docker image in your deployments, you can specify the digest of the image instead of the tag.

Example

The following command returns the current image digest referenced by the superlink:1.14.0 tag:

$ docker pull flwr/superlink:1.14.0
$ docker inspect --format='{{index .RepoDigests 0}}' flwr/superlink:1.14.0

This will output

flwr/superlink@sha256:4b317d5b6030710b476f4dbfab2c3a33021ad40a0fcfa54d7edd45e0c51d889c

Next, we can pin the digest when running a new SuperLink container:

$ docker run \
     --rm flwr/superlink@sha256:4b317d5b6030710b476f4dbfab2c3a33021ad40a0fcfa54d7edd45e0c51d889c \
     <additional-args>