From c410ed082940b41fc6e8c93602f5910c73dbe618 Mon Sep 17 00:00:00 2001 From: Josip Mrsic <32452896+josipmrsic@users.noreply.github.com> Date: Thu, 8 Oct 2026 15:35:22 +0200 Subject: [PATCH 1/2] Update the pinned Amazon RDS CA bundle checksum AWS replaced global-bundle.pem on 2026-09-29, so every OCI image build failed with a digest mismatch. --- packaging/oci/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packaging/oci/Dockerfile b/packaging/oci/Dockerfile index 0224544a..15b51d34 100644 --- a/packaging/oci/Dockerfile +++ b/packaging/oci/Dockerfile @@ -53,7 +53,7 @@ WORKDIR /opt/artifact-server RUN install -d -m 0755 /usr/local/share/ca-certificates -ADD --checksum=sha256:e5bb2084ccf45087bda1c9bffdea0eb15ee67f0b91646106e466714f9de3c7e3 \ +ADD --checksum=sha256:fe45bbebf92ad3e27a583bbb2ddd1553c521ed4d49af5514dc0a40372ea5395c \ https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem \ /usr/local/share/ca-certificates/aws-rds-global-bundle.pem From 8c490a94535f9565744c53877b404d8c29a37a0f Mon Sep 17 00:00:00 2001 From: Josip Mrsic <32452896+josipmrsic@users.noreply.github.com> Date: Tue, 20 Oct 2026 14:12:00 +0200 Subject: [PATCH 2/2] Update the pinned Amazon RDS CA bundle checksum again AWS replaced global-bundle.pem once more on 2026-10-14, so the checksum pinned on 2026-10-09 fails the OCI image build with a digest mismatch. The new bundle holds 114 certificates, all Amazon RDS root CAs. --- packaging/oci/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packaging/oci/Dockerfile b/packaging/oci/Dockerfile index 15b51d34..96876344 100644 --- a/packaging/oci/Dockerfile +++ b/packaging/oci/Dockerfile @@ -53,7 +53,7 @@ WORKDIR /opt/artifact-server RUN install -d -m 0755 /usr/local/share/ca-certificates -ADD --checksum=sha256:fe45bbebf92ad3e27a583bbb2ddd1553c521ed4d49af5514dc0a40372ea5395c \ +ADD --checksum=sha256:90a6f1a7978a1b1b096dca6c57511ca48d3b8cf052f8e704baf358f34ea2f21b \ https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem \ /usr/local/share/ca-certificates/aws-rds-global-bundle.pem