# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
# SPDX-License-Identifier: Apache-2.0

# Pinned dependency versions for the openshell-driver-vm runtime.
#
# This file is sourced by VM runtime packaging scripts. It centralises version
# pins and content-addressed digests so that builds are reproducible and
# auditable.
#
# Environment variables override these defaults — CI and local dev workflows
# can still set the runtime dependency versions below.
#
# To update a dependency:
#   1. Change the version/digest below.
#   2. Run the relevant build script to verify.
#   3. Commit pins.env alongside any script changes.

# ── Base Docker image (digest-pinned) ──────────────────────────────────
# Tag: nvcr.io/nvidia/base/ubuntu:noble-20251013
VM_BASE_IMAGE="${VM_BASE_IMAGE:-nvcr.io/nvidia/base/ubuntu@sha256:43fa5063e80fbbc533892af3ccca190868ce48db5a8928b19d7815c40436af8e}"

# ── Container images for rootfs pre-loading (digest-pinned) ────────────
# Tag: registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.1.0
AGENT_SANDBOX_IMAGE="${AGENT_SANDBOX_IMAGE:-registry.k8s.io/agent-sandbox/agent-sandbox-controller@sha256:ba71ea40ae0872791197badf2ab84f3f482df3902f1fce7ca9e076b1de9b57f6}"
# Tag: ghcr.io/nvidia/openshell-community/sandboxes/base:latest
COMMUNITY_SANDBOX_IMAGE="${COMMUNITY_SANDBOX_IMAGE:-ghcr.io/nvidia/openshell-community/sandboxes/base@sha256:d446c17105e7448e602238a8a5a4ddd0233c071082406522f81c31f8b1309525}"

# SERVER_IMAGE is intentionally NOT pinned here — it changes frequently
# during local development. Override via IMAGE_REPO_BASE and IMAGE_TAG
# environment variables (defaults: openshell/gateway:dev).

# ── gvproxy (networking proxy) ──────────────────────────────────────────
# Repo: https://github.com/containers/gvisor-tap-vsock
GVPROXY_VERSION="${GVPROXY_VERSION:-v0.8.8}"

# ── umoci (guest OCI unpacker) ──────────────────────────────────────────
# Repo: https://github.com/opencontainers/umoci
UMOCI_VERSION="${UMOCI_VERSION:-v0.6.0}"

# ── libkrunfw upstream (commit-pinned) ─────────────────────────────────
# Repo: https://github.com/containers/libkrunfw
# Pinned: 2026-03-27 (main branch HEAD at time of pinning)
LIBKRUNFW_REF="${LIBKRUNFW_REF:-463f717bbdd916e1352a025b6fb2456e882b0b39}"