WIP feat(kt-devnet): pin container images

kurtosis-devnet/optimism-package-trampoline/README.md

@@ -1,7 +1,9 @@
 This package contains a mostly empty Kurtosis package,
 that trampolines to github.com/ethpandas/optimism-package.
 
-The goal here is to use the `replace` section of `kurtosis.yml`
-as a "lockfile" for our package dependencies.
+The goal here is to pin dependencies using 2 distinct mechanisms:
+
+- using the `replace` section of `kurtosis.yml` as a lockfile for our kurtosis package dependencies.
+- using the content of `docker_lock.star` as a lockfile for our container images dependencies.
 
 This way, we achieve reproducibility for our devnet deployments.

kurtosis-devnet/optimism-package-trampoline/docker_lock.star

@@ -0,0 +1,5 @@
+_registry = import_module("github.com/ethpandaops/optimism-package/src/package_io/registry.star")
+
+PINNED_IMAGES = {
+    _registry.PROXYD: "us-docker.pkg.dev/oplabs-tools-artifacts/images/proxyd:v4.15.0",
+}

kurtosis-devnet/optimism-package-trampoline/main.star

@@ -1,5 +1,13 @@
-optimism_package = import_module("github.com/ethpandaops/optimism-package/main.star")
+"""
+This is a trampoline script that delegates to the optimism-package.
+It is used to pin the dependencies to specific versions.
+"""
+
+_optimism_package = import_module("github.com/ethpandaops/optimism-package/main.star")
+_docker_lock = import_module("docker_lock.star")
 
 def run(plan, args):
-    # just delegate to optimism-package
-    optimism_package.run(plan, args)
+    explicit_registry = args.get("registry", {})
+    args["registry"] = _docker_lock.PINNED_IMAGES | explicit_registry
+    # delegate to optimism-package
+    _optimism_package.run(plan, args)