trust-packages: update base image

Signed-off-by: Daichi Sakaue <[email protected]>

maintenance.md

@@ -897,15 +897,13 @@ Only the base image and module dependency should be updated.
 ![Regular Update](./regular_update.svg)
 
 1. Check the [release page](https://github.com/cert-manager/trust-manager/releases).
-2. Check the upstream Containerfile. If there are any updates, update our `Dockerfile`.
-   - https://github.com/cert-manager/trust-manager/blob/vX.Y.Z/trust-packages/debian/Containerfile
-3. Update `TRUST_MANAGER_VERSION` in `Dockerfile`.
-4. Update `EXPECTED_VERSION` in `Dockerfile` as needed. You can check it to run docker command as follows.
+2. Update `TRUST_MANAGER_VERSION` in `Dockerfile`.
+3. Update `EXPECTED_VERSION` in `Dockerfile` as needed. You can check it to run docker command as follows.
    ```bash
    $ docker run --rm ghcr.io/cybozu/ubuntu:22.04 dpkg-query --show  ca-certificates
    ```
-5. Check the [tini release page](https://github.com/krallin/tini/releases) and update `TINI_VERSION` in `Dockerfile` as needed.
-6. Update `TAG` file. The TAG format is `<ca-certificates version>.<patch version>`.
+4. Check the [tini release page](https://github.com/krallin/tini/releases) and update `TINI_VERSION` in `Dockerfile` as needed.
+5. Update `TAG` file. The TAG format is `<ca-certificates version>.<patch version>`.
 
 ## ttypdb
 

trust-packages/Dockerfile

@@ -3,7 +3,7 @@
 # Stage1: build from source
 FROM ghcr.io/cybozu/golang:1.22-jammy AS build
 
-ARG TRUST_MANAGER_VERSION=0.9.2
+ARG TRUST_MANAGER_VERSION=0.11.1
 WORKDIR /work
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 RUN curl -fsSL https://github.com/cert-manager/trust-manager/archive/v${TRUST_MANAGER_VERSION}.tar.gz | \
@@ -14,7 +14,7 @@ RUN CGO_ENABLED=0 go build -o copyandmaybepause main.go
 RUN CGO_ENABLED=0 go install github.com/cert-manager/trust-manager/cmd/validate-trust-package@main
 
 # Stage2: copy ca-certificates from ubuntu
-FROM quay.io/cybozu/ubuntu:22.04 as debbase
+FROM ghcr.io/cybozu/ubuntu:22.04 as debbase
 
 ARG EXPECTED_VERSION=20230311ubuntu0.22.04.1
 ARG VERSION_SUFFIX=.0

trust-packages/TAG

@@ -1 +1 @@
-20230311ubuntu0.22.04.1.2
+20230311ubuntu0.22.04.1.3