Comment 4 for bug 1888946

@ltrager I appreciate the insightful response, and I agree, the image management needs an overhaul. For us, our infiniband drivers had upstream support for the kernel used in centos7.7 but not 7.8. Because of the image auto-sync we got caught red handed in the middle of this. MLNX offers the drivers for centos7.8 from their upstream repo, but they just aren't compatible with the kernel. While the fix wasn't too bad (we now have to build and send our mlnx-ofed built for the specific kernel that we will be running on), I do feel like we are exposed to this sort of situation without some sort of image lock in place. Possibly it isn't centos7.7 -> 7.8 that broke us, but rather a mlnx-ofed vs kernel version. Either way, I feel that if we had the capability to lock our image we would have been able to avoid this happening in the live environment.