[release-v1.31] Pin apko package versions (#624)

* Pin versions & include verify before building

Signed-off-by: Niclas Schad <niclas.schad@stackit.cloud>

* remove verify

Signed-off-by: Niclas Schad <niclas.schad@stackit.cloud>

* pin xfsprogs-core

Signed-off-by: Niclas Schad <niclas.schad@stackit.cloud>

* add comment

Signed-off-by: Niclas Schad <niclas.schad@stackit.cloud>

---------

Signed-off-by: Niclas Schad <niclas.schad@stackit.cloud>
Co-authored-by: Niclas Schad <niclas.schad@stackit.cloud>

Author: stackit-ske

cmd/stackit-csi-plugin/apko-base-image.yaml

@@ -4,20 +4,22 @@ contents:
   repositories:
   - https://packages.wolfi.dev/os
   packages:
-  - ca-certificates
-  - blkid
-  - blockdev
-  - e2fsprogs
-  - e2fsprogs-extra
-  - lsblk
-  - mount
-  - umount
-  - btrfs-progs
-  - udev
-  - util-linux-misc # contains fsck
-  - xfsprogs 
-  - xfsprogs-extra # contains xfs_io
-  - findmnt
+  - busybox # required by fsck.xfs as it is a sh script
+  - ca-certificates=~20250911
+  - blkid=~2.41.2
+  - blockdev=~2.41.2
+  - e2fsprogs=~1.47.3
+  - e2fsprogs-extra=~1.47.3
+  - lsblk=~2.41.2
+  - mount=~2.41.2
+  - umount=~2.41.2
+  - btrfs-progs=~6.17
+  - udev=~258.1
+  - util-linux-misc=~2.41.2 # contains fsck
+  - xfsprogs=~6.17.0
+  - xfsprogs-core=~6.17.0
+  - xfsprogs-extra=~6.17.0 # contains xfs_io
+  - findmnt=~2.41.2
 
 accounts:
   run-as: root

tools/csi-deps-check.sh

@@ -30,6 +30,7 @@ set -o errexit
 /sbin/mke2fs -V
 /sbin/mkfs.ext4 -V
 /sbin/mkfs.xfs -V
+/usr/bin/fsck.xfs
 /usr/sbin/xfs_io -V # not used by mount-utils though
 /sbin/xfs_repair -V
 /usr/sbin/xfs_growfs -V