fix(libation): pin image to 14.2.1 by digest

The CronJob ran `rmcrackan/libation:latest` with imagePullPolicy Always but was stuck on 13.7.11 (2026-08-24). Spegel answers containerd's tag resolution from its peer cache -- a 200 from the mirror is a hit, so upstream is never consulted and the tag never advances. Verified: the pod's imageID was sha256:946177d3 (= tag 13.7.11) while Docker Hub's :latest pointed at sha256:6f9d8ba1 (= 14.2.1), and querying a Spegel pod's registry port directly returned the stale digest for that tag. Audible changed device registration in early September; upstream shipped an experimental fix in 14.1 and the real fix in 14.2, so the stale image predates both. Since 2026-09-15 three newly purchased titles fail with "Content license denied" and the library has not grown. A digest reference is immune to the mirror's tag cache. Note that the upstream maintainer's remedy also requires removing and re-adding the Audible account with an interactive login, which this change does not and cannot perform. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-09-16 17:30:37 +02:00
1 changed files with 3 additions and 1 deletions
@@ -85,7 +85,9 @@ spec:
                  type: RuntimeDefault
          containers:
            - name: libation
-              image: docker.io/rmcrackan/libation:latest
+              # Pinned by digest: Spegel caches mutable tag resolutions, so
+              # :latest stayed on 13.7.11 despite imagePullPolicy Always.
+              image: docker.io/rmcrackan/libation:14.2.1@sha256:6f9d8ba19dc3803dd6ba295ab5a7abfb6ff3bc06286eebf4ecd8ccbe43245888
              env:
                - name: LIBATION_CONFIG_DIR
                  value: /libation-state