How to get SHA of Docker images used in a release

Hello,

I have created a release from a docker-compose file with existing docker images (using image:). I would like to verify that the images that have been pulled are the correct one.

How can I do this ? I didn’t find this information in the release page, nor in balena release CLI output.

If you are running that release, you can open a terminal to the HostOS and run
balena images --digests | awk '{print $3}'

Would that help, or you want to check before using the release?

Hello,

Thanks for your answer !

Yes I would like to check before the release. Our different components are build independently on different CIs, and pushed to our docker registry.

So when I create a release, I would like to verify before validating the release that the correct images have been used (to avoid a release where some components would not be here because a CI failed for example).

If this is for the created images on the CI platform; would something like docker image history <image_name> work for you?

I don’t think so, what I would like ideally is something like:

$ balena release XXXX
  service1: SHA...
  service2: SHA...

If that’s not possible I’ll find an other way of following my deployment, that’s ok.