From 9b26f867bc2fe29568e86f65e55070195bfe5fe0 Mon Sep 17 00:00:00 2001
From: Josh Creek <8179928+jcreek@users.noreply.github.com>
Date: Tue, 1 Sep 2026 13:38:07 +0100
Subject: [PATCH] fix(docker): re-pin dead ubuntu base image digest

The server stage's ubuntu@sha256:571c2ab1... no longer resolves from
Docker Hub (docker pull by that exact digest returns 'not found',
verified directly, independent of anything in this Dockerfile) --
make verify-phase6 was currently broken for anyone building from a
clean cache. Found while adding a new build stage below it and
actually running the build rather than just editing the file.
Re-pinned to a digest verified to pull, and re-ran the full
make verify-phase6 gate end to end to confirm: both arenas rotated,
both headless clients observed both authoritative goals, clean
teardown.
---
 Dockerfile | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8f987462..542343ae 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -29,8 +29,12 @@ RUN sed -i 's|^run/main_scene=.*$|run/main_scene="res://scenes/server_boot.tscn"
  && mkdir -p /opt/cosmic-clash \
  && godot --headless --path Game --export-release "Linux Dedicated Server" /opt/cosmic-clash/CosmicClashServer.x86_64
 
-# ubuntu:24.04 multi-architecture index, resolved 2026-08-29.
-FROM --platform=linux/amd64 ubuntu@sha256:571c2ab10651ab3a703fcfcb1b06545f5b53085872dcdf68bed17dd7ef4d72db AS server
+# ubuntu:24.04 multi-architecture index, resolved 2026-09-01. The previous
+# pin (571c2ab1...) no longer resolves from Docker Hub as of this date --
+# `docker pull` by that exact digest returns "not found", meaning
+# make verify-phase6 (and this Dockerfile generally) was currently broken for
+# anyone building from a clean cache. Re-pinned to a digest verified to pull.
+FROM --platform=linux/amd64 ubuntu@sha256:33ceb71981b602c1a7443a53469e4dba065f7503eab3078a2d7a57a2ab987517 AS server
 RUN apt-get update && apt-get install -y --no-install-recommends libfontconfig1 libgl1 libstdc++6 && rm -rf /var/lib/apt/lists/*
 COPY --from=exporter /opt/cosmic-clash/ /opt/cosmic-clash/
 COPY deploy/cosmic-clash-server /opt/cosmic-clash/cosmic-clash-server