From a68879e904d091d1236fd3e3ce83afca605e505b Mon Sep 17 00:00:00 2001
From: root <root@abiba.sysloggh.net>
Date: Sat, 18 Jul 2026 22:07:15 +0000
Subject: [PATCH] no-mistakes(review): fix docker rollback command to pin
 digest then compose up

---
 infrastructure-maintenance.prose.md | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/infrastructure-maintenance.prose.md b/infrastructure-maintenance.prose.md
index e9a3b1a..e0dbf07 100644
--- a/infrastructure-maintenance.prose.md
+++ b/infrastructure-maintenance.prose.md
@@ -148,8 +148,9 @@ If ANY service in Phase 4 fails to come back up (or regresses vs baseline):
    ```bash
    # Restore from recorded image-baseline digest
    docker compose down
-   docker compose pull <previous_digest>   # or set image: <digest> in compose and up -d
-   docker compose up -d
+   # Pin the service image to the recorded digest in compose, then recreate
+   #   image: <name>@sha256:<previous_digest>
+   docker compose pull && docker compose up -d
    ```
 2. **APT rollback** — restore the primary host from the Proxmox snapshot taken/confirmed in Phase 0. If no snapshot, `apt install <pkg>=<old_version>` per package using apt history (`/var/log/apt/history.log`).
 3. **Config rollback** — restore configs from `/tmp/infra-maintenance-backup-<date>/`.