workout

Author: g-bgg

.github/workflows/release.yaml

@@ -16,6 +16,8 @@ env:
   GH_REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
   RELEASE_VERSION: ${{ github.ref_name }}
+  SCANNER_IMG_VERSION: v1.0.10
+  SNIFFER_IMG_VERSION: v1.1.8
 
 jobs:
   goreleaser:
@@ -89,6 +91,8 @@ jobs:
             ${{ env.GH_REGISTRY }}/${{ env.IMAGE_NAME }}:latest
           build-args: |
             VERSION=${{ env.RELEASE_VERSION }}
+            SCANNER_IMG_VERSION=${{ env.SCANNER_IMG_VERSION }}
+            SNIFFER_IMG_VERSION=${{ env.SNIFFER_IMG_VERSION }}
 
       - name: Sign artifact
         run: |

Dockerfile

@@ -6,7 +6,7 @@ COPY . /build
 WORKDIR /build
 
 RUN go mod download && \
-    CGO_ENABLED=0 GO111MODULE=on go build -ldflags="-X 'main.appName=NetAssert' -X 'main.version=${VERSION}'" -v -o /netassertv2 cmd/netassert/cli/*.go && \
+    CGO_ENABLED=0 GO111MODULE=on go build -ldflags="-X 'main.appName=NetAssert' -X 'main.version=${VERSION}' -X 'main.scannerImgVersion=${SCANNER_IMG_VERSION}' -X 'main.snifferImgVersion=${SNIFFER_IMG_VERSION}'" -v -o /netassertv2 cmd/netassert/cli/*.go && \
     ls -ltr /netassertv2
 
 FROM gcr.io/distroless/base:nonroot

cmd/netassert/cli/root.go

@@ -6,11 +6,14 @@ import (
 	"github.com/spf13/cobra"
 )
 
+// these variables are overwritten at build time using ldflags
 var (
-	version   = "v2.0.0-dev" // netassert version
-	appName   = "NetAssert"  // name of the application
-	gitHash   = ""           // the git hash of the build
-	buildDate = ""           // build date, will be injected by the build system
+	version           = "v2.0.0-dev" // netassert version
+	appName           = "NetAssert"  // name of the application
+	gitHash           = ""           // the git hash of the build
+	buildDate         = ""           // build date, will be injected by the build system
+	scannerImgVersion = "latest"     // scanner container image version
+	snifferImgVersion = "latest"     // sniffer container image version
 )
 
 var rootCmd = &cobra.Command{

cmd/netassert/cli/run.go

@@ -35,9 +35,9 @@ type runCmdConfig struct {
 var runCmdCfg = runCmdConfig{
 	TapFile:                "results.tap", // name of the default TAP file where the results will be written
 	SuffixLength:           9,             // suffix length of the random string to be appended to the container name
-	SnifferContainerImage:  "docker.io/controlplane/netassertv2-packet-sniffer:v1.1.7",
+	SnifferContainerImage:  fmt.Sprintf("%s:%s", "docker.io/controlplane/netassertv2-packet-sniffer", snifferImgVersion),
 	SnifferContainerPrefix: "netassertv2-sniffer",
-	ScannerContainerImage:  "docker.io/controlplane/netassertv2-l4-client:v1.0.6",
+	ScannerContainerImage:  fmt.Sprintf("%s:%s", "docker.io/controlplane/netassertv2-l4-client", scannerImgVersion),
 	ScannerContainerPrefix: "netassertv2-client",
 	PauseInSeconds:         1,      // seconds to pause before each test case
 	PacketCaptureInterface: `eth0`, // the interface used by the sniffer image to capture traffic

justfile

@@ -5,7 +5,7 @@ version := "0.0.1"
 
 # build the binary in ./bin folder
 build:
-	go build -ldflags="-X 'main.appName=NetAssert' -X 'main.version=2.0.0-dev'" -o bin/netassert cmd/netassert/cli/*.go
+	go build -o bin/netassert cmd/netassert/cli/*.go
 
 # build and run the binary
 run: build