From 9b07e8743c2c9b7bd8503ac073d0e004d3347215 Mon Sep 17 00:00:00 2001
From: dresi <git@dresi.wtf>
Date: Wed, 10 Jun 2026 16:14:27 +0200
Subject: [PATCH] fix: use insecure=true for harbor.lan in BuildKit config

---
 .gitea/workflows/rsyncd.yaml        | 24 +-----------------------
 .gitea/workflows/telegraf-snmp.yaml | 24 +-----------------------
 2 files changed, 2 insertions(+), 46 deletions(-)

diff --git a/.gitea/workflows/rsyncd.yaml b/.gitea/workflows/rsyncd.yaml
index 2f07f90..c6cff1e 100644
--- a/.gitea/workflows/rsyncd.yaml
+++ b/.gitea/workflows/rsyncd.yaml
@@ -26,34 +26,12 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
 
-      - name: Write internal CA cert
-        run: |
-          mkdir -p /tmp/buildkit-certs
-          printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config-inline: |
             [registry."harbor.lan"]
-              ca=["/tmp/buildkit-certs/harbor-ca.pem"]
-
-      - name: Trust internal CA in BuildKit system store
-        run: |
-          BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
-          echo "Builder: $BUILDER"
-          docker exec "$BUILDER" sh -c '
-            echo "--- cert landscape ---"
-            ls -la /etc/ssl/ /etc/ssl/certs/ 2>/dev/null | head -15
-            for f in /etc/ssl/certs/ca-certificates.crt /etc/ssl/cert.pem; do
-              [ -e "$f" ] || continue
-              cat /etc/buildkit/certs/harbor.lan/harbor-ca.pem >> "$f"
-              echo "Appended CA to $f"
-              break
-            done
-          '
-          docker restart "$BUILDER"
-          sleep 5
+              insecure = true
 
       - name: Build and push image
         uses: docker/build-push-action@v6
diff --git a/.gitea/workflows/telegraf-snmp.yaml b/.gitea/workflows/telegraf-snmp.yaml
index 733908d..6de66f8 100644
--- a/.gitea/workflows/telegraf-snmp.yaml
+++ b/.gitea/workflows/telegraf-snmp.yaml
@@ -26,34 +26,12 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
 
-      - name: Write internal CA cert
-        run: |
-          mkdir -p /tmp/buildkit-certs
-          printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
-
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
           buildkitd-config-inline: |
             [registry."harbor.lan"]
-              ca=["/tmp/buildkit-certs/harbor-ca.pem"]
-
-      - name: Trust internal CA in BuildKit system store
-        run: |
-          BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
-          echo "Builder: $BUILDER"
-          docker exec "$BUILDER" sh -c '
-            echo "--- cert landscape ---"
-            ls -la /etc/ssl/ /etc/ssl/certs/ 2>/dev/null | head -15
-            for f in /etc/ssl/certs/ca-certificates.crt /etc/ssl/cert.pem; do
-              [ -e "$f" ] || continue
-              cat /etc/buildkit/certs/harbor.lan/harbor-ca.pem >> "$f"
-              echo "Appended CA to $f"
-              break
-            done
-          '
-          docker restart "$BUILDER"
-          sleep 5
+              insecure = true
 
       - name: Build and push image
         uses: docker/build-push-action@v6