fix: configure BuildKit registry CA via buildkitd-config-inline
This commit is contained in:
parent
9c2599dd9b
commit
4c2ef22a9b
@ -26,16 +26,17 @@ jobs:
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v3
|
||||
|
||||
- name: Write internal CA cert
|
||||
run: |
|
||||
mkdir -p /tmp/buildkit-certs
|
||||
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Trust internal CA in BuildKit container
|
||||
run: |
|
||||
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
|
||||
echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" | \
|
||||
docker exec -i "$BUILDER" sh -c 'cat >> /etc/ssl/certs/ca-certificates.crt'
|
||||
docker restart "$BUILDER"
|
||||
sleep 5
|
||||
with:
|
||||
buildkitd-config-inline: |
|
||||
[registry."harbor.lan"]
|
||||
ca=["/tmp/buildkit-certs/harbor-ca.pem"]
|
||||
|
||||
- name: Build and push image
|
||||
uses: docker/build-push-action@v6
|
||||
|
||||
@ -26,18 +26,17 @@ jobs:
|
||||
- name: Set up QEMU
|
||||
uses: docker/setup-qemu-action@v3
|
||||
|
||||
- name: Write internal CA cert
|
||||
run: |
|
||||
mkdir -p /tmp/buildkit-certs
|
||||
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Trust internal CA in BuildKit container
|
||||
run: |
|
||||
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
|
||||
echo "Builder: $BUILDER"
|
||||
echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/internal-ca.crt
|
||||
docker cp /tmp/internal-ca.crt "$BUILDER":/usr/local/share/ca-certificates/internal-ca.crt
|
||||
docker exec "$BUILDER" update-ca-certificates
|
||||
docker restart "$BUILDER"
|
||||
sleep 5
|
||||
with:
|
||||
buildkitd-config-inline: |
|
||||
[registry."harbor.lan"]
|
||||
ca=["/tmp/buildkit-certs/harbor-ca.pem"]
|
||||
|
||||
- name: Build and push image
|
||||
uses: docker/build-push-action@v6
|
||||
|
||||
Loading…
Reference in New Issue
Block a user