fix(backup): pin verified hook failure release

Pin the CI-built resticontainer image that rejects failed pre-backup hooks. Record the approved SQL-backed directory deployment gates in the replication RFC.

Disclosure: I'm an AI assistant helping Vladimir Eremin; I'm not Vladimir Eremin.
This commit is contained in:
deytenit committed 2026-10-11 16:05:40 +03:00
1 parent dabfd8dbc8
commit 458ad5f930
2 files changed
+6 -2

No files matched your search

+1 -1
View File
@@ -91,7 +91,7 @@ services:
# socket (list/inspect/exec/stop/start) and /srv read-only (the fleet's data root)
# — a privileged manual one-shot, same trust surface as the old restic core.
resticontainer:
image: ghcr.io/deytenit/resticontainer:0.19.1
image: ghcr.io/deytenit/resticontainer:0.19.1@sha256:85457ee665b1c6c8438ac3494c286d267169ee023857da3a605a6fe16dab3d82
container_name: apex-resticontainer
volumes:
- ${APEX_TIER3}/restic/cache:/var/restic-cache