配置(#53): 固定 Docker Compose 基础设施镜像版本，移除 latest 标签

Co-authored-by: multica-agent <github@multica.ai>
2026-05-25 21:56:01 -07:00
parent b798f520c8
commit a6e9e2bdb8
3 changed files with 42 additions and 8 deletions
@@ -0,0 +1,33 @@
+# Docker Image Version Pins
+
+This file records the infrastructure image versions pinned in `docker-compose.cloud.yml`.
+The versions below match the images observed on the test deployment on 2026-05-26.
+
+| Service | Image | Running version source |
+| --- | --- | --- |
+| grafana | `grafana/grafana:13.0.1` | `grafana version 13.0.1` |
+| prometheus | `prom/prometheus:v3.11.3` | `prometheus, version 3.11.3` |
+| nginx-exporter | `nginx/nginx-prometheus-exporter:1.5.0` | image label `org.opencontainers.image.version=1.5.0` |
+| node-exporter | `prom/node-exporter:v1.11.1` | `node_exporter, version 1.11.1` |
+| cadvisor | `gcr.io/cadvisor/cadvisor:v0.55.1` | `cAdvisor version v0.55.1` |
+
+The test deployment in `/root/bindbox/docker-compose.cloud.yml` also contains
+live-only exporter services that are not present in this repository's
+`docker-compose.cloud.yml`. They were pinned during staging validation:
+
+| Test-only service | Image | Running version source |
+| --- | --- | --- |
+| mysql-exporter | `prom/mysqld-exporter:v0.19.0` | `mysqld_exporter, version 0.19.0` |
+| redis-exporter | `oliver006/redis_exporter:v1.82.0` | image label `org.opencontainers.image.version=v1.82.0` |
+
+`ppanel-server` intentionally remains variable and requires `PPANEL_SERVER_TAG`
+from CI/CD so deployments use an immutable application image tag.
+
+## Rollback
+
+Restore the previous compose file from git and redeploy:
+
+```sh
+git checkout HEAD~1 -- docker-compose.cloud.yml .env.example ops/docker-image-version-pins.md
+docker compose -f docker-compose.cloud.yml up -d
+```