Merge pull request #3 from lucasrod16/pin-docker-image-shas

pin docker image digests and configure dependabot

.github/dependabot.yml

@@ -0,0 +1,6 @@
+version: 2
+updates:
+  - package-ecosystem: "docker"
+    directory: "docker"
+    schedule:
+      interval: "daily"

deploy.sh

@@ -15,7 +15,7 @@ echo "Waiting for EC2 instance to be ready..."
 aws ec2 wait instance-status-ok --instance-ids "$INSTANCE_ID"
 
 ssh-keyscan -H "$INSTANCE_IP" >> ~/.ssh/known_hosts
-scp -p docker-compose.yml ubuntu@"$INSTANCE_IP":~/
+scp -r docker/ docker-compose.yml ubuntu@"$INSTANCE_IP":~/
 
 ssh ubuntu@"$INSTANCE_IP" << EOF
 #!/usr/bin/env bash

docker-compose.yml

@@ -3,7 +3,9 @@ name: self-hosted-llm
 services:
   ollama:
     container_name: ollama
-    image: ollama/ollama:latest
+    build:
+      context: ./docker
+      dockerfile: ollama.Dockerfile
     ports:
       - "11434:11434"
     volumes:
@@ -18,7 +20,9 @@ services:
 
   open-webui:
     container_name: open-webui
-    image: ghcr.io/open-webui/open-webui:main
+    build:
+      context: ./docker
+      dockerfile: webui.Dockerfile
     ports:
       - "8080:8080"
     volumes:

docker/README.md

@@ -0,0 +1,8 @@
+# Dockerfiles
+
+The Dockerfiles in this directory are used as a workaround to allow dependabot to automatically update Ollama and Open WebUI container images.
+
+Dependabot does not currently support updating images in Docker compose files.
+
+- <https://github.com/dependabot/dependabot-core/issues/390>
+- <https://github.com/dependabot/dependabot-core/issues/390#issuecomment-1062170379>

docker/ollama.Dockerfile

@@ -0,0 +1 @@
+FROM ollama/ollama:0.5.4@sha256:18bfb1d605604fd53dcad20d0556df4c781e560ebebcd923454d627c994a0e37

docker/webui.Dockerfile

@@ -0,0 +1 @@
+FROM ghcr.io/open-webui/open-webui:v0.5.3@sha256:e5c0b17626cddb96878c589ab64b0a67572b0b8d98cf9d4a10c33d2604e3126b