fix: configure BuildKit registry CA via buildkitd-config-inline
This commit is contained in:
parent
9c2599dd9b
commit
4c2ef22a9b
@ -26,16 +26,17 @@ jobs:
|
|||||||
- name: Set up QEMU
|
- name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v3
|
uses: docker/setup-qemu-action@v3
|
||||||
|
|
||||||
|
- name: Write internal CA cert
|
||||||
|
run: |
|
||||||
|
mkdir -p /tmp/buildkit-certs
|
||||||
|
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
|
||||||
|
|
||||||
- name: Set up Docker Buildx
|
- name: Set up Docker Buildx
|
||||||
uses: docker/setup-buildx-action@v3
|
uses: docker/setup-buildx-action@v3
|
||||||
|
with:
|
||||||
- name: Trust internal CA in BuildKit container
|
buildkitd-config-inline: |
|
||||||
run: |
|
[registry."harbor.lan"]
|
||||||
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
|
ca=["/tmp/buildkit-certs/harbor-ca.pem"]
|
||||||
echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" | \
|
|
||||||
docker exec -i "$BUILDER" sh -c 'cat >> /etc/ssl/certs/ca-certificates.crt'
|
|
||||||
docker restart "$BUILDER"
|
|
||||||
sleep 5
|
|
||||||
|
|
||||||
- name: Build and push image
|
- name: Build and push image
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
|
|||||||
@ -26,18 +26,17 @@ jobs:
|
|||||||
- name: Set up QEMU
|
- name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v3
|
uses: docker/setup-qemu-action@v3
|
||||||
|
|
||||||
|
- name: Write internal CA cert
|
||||||
|
run: |
|
||||||
|
mkdir -p /tmp/buildkit-certs
|
||||||
|
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
|
||||||
|
|
||||||
- name: Set up Docker Buildx
|
- name: Set up Docker Buildx
|
||||||
uses: docker/setup-buildx-action@v3
|
uses: docker/setup-buildx-action@v3
|
||||||
|
with:
|
||||||
- name: Trust internal CA in BuildKit container
|
buildkitd-config-inline: |
|
||||||
run: |
|
[registry."harbor.lan"]
|
||||||
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
|
ca=["/tmp/buildkit-certs/harbor-ca.pem"]
|
||||||
echo "Builder: $BUILDER"
|
|
||||||
echo "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/internal-ca.crt
|
|
||||||
docker cp /tmp/internal-ca.crt "$BUILDER":/usr/local/share/ca-certificates/internal-ca.crt
|
|
||||||
docker exec "$BUILDER" update-ca-certificates
|
|
||||||
docker restart "$BUILDER"
|
|
||||||
sleep 5
|
|
||||||
|
|
||||||
- name: Build and push image
|
- name: Build and push image
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user