imagerefs

const (
	// etcd distributed key-value store (gcr.io/etcd-development/etcd)
	Etcd = "oci.miren.cloud/etcd:v3.5.15"

	// Kubernetes pause container for sandboxes (registry.k8s.io/pause)
	Pause = "oci.miren.cloud/pause:3.8"

	// BuildKit daemon for building containers (ghcr.io/mirendev/buildkit). Our
	// fork only publishes a rolling "latest", so we pin its digest for
	// reproducible builds; bump this when rolling out a new BuildKit.
	BuildKit = "oci.miren.cloud/buildkit@sha256:1263587b78162302359fec3485c153d44872114b8e944ef94be053cc2218679f"

	// Minio object storage server (quay.io/minio/minio)
	Minio = "oci.miren.cloud/minio:RELEASE.2025-04-03T14-56-28Z"

	// VictoriaLogs log storage server (docker.io/victoriametrics/victoria-logs)
	VictoriaLogs = "oci.miren.cloud/victoria-logs:v1.0.0-victorialogs"

	// VictoriaMetrics metrics storage server (docker.io/victoriametrics/victoria-metrics)
	VictoriaMetrics = "oci.miren.cloud/victoria-metrics:v1.106.1"

	// Miren runtime server
	Miren = "oci.miren.cloud/miren:latest"
)

const (
	// Default Alpine Linux base image
	AlpineDefault = "oci.miren.cloud/alpine:3.21"

	// Default Busybox image
	BusyboxDefault = "oci.miren.cloud/busybox:1.37-musl"

	// GoRuntimeStatic is the runtime base for pure-Go (cgo-disabled) builds:
	// a fully static binary lands here, yielding the canonical tiny Go image.
	// distroless/static ships ca-certificates, tzdata, and a nonroot user but
	// no shell or libc (docker.io/... proxied to gcr.io/distroless).
	GoRuntimeStatic = "oci.miren.cloud/distroless/static-debian12:nonroot"

	// DebianSlim is the runtime base for builds that need glibc at runtime
	// (cgo) or that carry a runtime filesystem the static image can't hold
	// (e.g. JS-augmented assets). It has a shell, apt, and glibc.
	DebianSlim = "oci.miren.cloud/debian:bookworm-slim"
)