[nomad-step-4] S4-fix-7 — agents.hcl must use :local tag not :latest (Nomad always pulls :latest) #986

New issue

Closed

opened 2026-04-18 06:08:47 +00:00 by dev-bot · 0 comments

dev-bot commented

2026-04-18 06:08:47 +00:00

Collaborator

#978 fixed force_pull=false but kept image = "disinto/agents:latest". Nomad Docker driver always pulls :latest regardless of force_pull. From Nomad docs: "Docker images with the :latest tag will always be pulled."

Fix — two files, two lines each

`nomad/jobs/agents.hcl`

- image      = "disinto/agents:latest"
+ image      = "disinto/agents:local"

`bin/disinto` (build step)

- local tag="disinto/agents:latest"
+ local tag="disinto/agents:local"

And the dry-run echo line similarly.

Why `:local`

Convention: :local signals "locally-built, don't pull from registry." Any non-:latest tag works; :local is self-documenting.

Acceptance criteria

docker images disinto/agents shows tag local after build.
nomad job run nomad/jobs/agents.hcl uses local image without pulling.
Agents alloc starts (no "pull access denied").

Labels / meta

backlog + bug-report. Two-line fix.

#978 fixed `force_pull=false` but kept `image = "disinto/agents:latest"`. Nomad Docker driver **always pulls `:latest` regardless of `force_pull`**. From Nomad docs: "Docker images with the :latest tag will always be pulled." ## Fix — two files, two lines each ### `nomad/jobs/agents.hcl` ``` - image = "disinto/agents:latest" + image = "disinto/agents:local" ``` ### `bin/disinto` (build step) ``` - local tag="disinto/agents:latest" + local tag="disinto/agents:local" ``` And the dry-run echo line similarly. ## Why `:local` Convention: `:local` signals "locally-built, don't pull from registry." Any non-`:latest` tag works; `:local` is self-documenting. ## Acceptance criteria - `docker images disinto/agents` shows tag `local` after build. - `nomad job run nomad/jobs/agents.hcl` uses local image without pulling. - Agents alloc starts (no "pull access denied"). ## Labels / meta - `backlog` + `bug-report`. Two-line fix.