Fix. pipCommand not pinned by hash in ci (#361)

* Fix. pipCommand not pinned by hash in ci

Signed-off-by: Eoghan Conlon <[email protected]>

Author: eoghanconlon

ci/ovs_test_setup/testpmd_image/Dockerfile

@@ -1,4 +1,5 @@
 FROM ubuntu:22.04@sha256:6042500cf4b44023ea1894effe7890666b0c5c7871ed83a97c36c76ae560bb9b
+COPY ./requirements.txt /
 RUN apt-get -q update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         git \
@@ -9,7 +10,7 @@ RUN apt-get -q update \
         python3-pip \
         ninja-build \
         build-essential \
-        && pip3 install --no-cache-dir --upgrade meson==1.3.0 \
+        && pip3 install --no-cache-dir --upgrade --require-hashes -r requirements.txt \
     && rm -rf /var/lib/apt/lists/*
 RUN apt-get update -y \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates \

ci/ovs_test_setup/testpmd_image/requirements.txt

@@ -0,0 +1 @@
+meson==1.3.0 --hash=sha256:e9f54046ce5b9a1f3024f7a7d52f19f085fd57c9d26a5db0cfcf0750572a8fd8

docker/testpmd/Dockerfile

@@ -1,4 +1,5 @@
 FROM ubuntu:22.04@sha256:bbf3d1baa208b7649d1d0264ef7d522e1dc0deeeaaf6085bf8e4618867f03494
+COPY ./requirements.txt /
 RUN apt-get -q update \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         git \
@@ -9,7 +10,7 @@ RUN apt-get -q update \
         python3-pip \
         ninja-build \
         build-essential \
-        && pip3 install --no-cache-dir --upgrade meson==1.3.0 \
+        && pip3 install --no-cache-dir --upgrade --require-hashes -r requirements.txt \
     && rm -rf /var/lib/apt/lists/*
 RUN apt-get update -y \
     && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ca-certificates \

docker/testpmd/requirements.txt

@@ -0,0 +1 @@
+meson==1.3.0 --hash=sha256:e9f54046ce5b9a1f3024f7a7d52f19f085fd57c9d26a5db0cfcf0750572a8fd8