dresi/container-images
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use insecure=true for harbor.lan in BuildKit config
Some checks failed
Build and push telegraf-snmp image / build-and-push-image (push) Failing after 2m17s
Details
Build and push rsyncd image / build-and-push-image (push) Failing after 3m53s
Details

Browse Source
This commit is contained in:
dresi 2026-06-10 16:14:27 +02:00
parent 17165069c2
commit 9b07e8743c
2 changed files with 2 additions and 46 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
.gitea/workflows/rsyncd.yaml
View File

@ -26,34 +26,12 @@ jobs:
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v3
- name: Write internal CA cert
run: |
mkdir -p /tmp/buildkit-certs
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3
with: with:
buildkitd-config-inline: | buildkitd-config-inline: |
[registry."harbor.lan"] [registry."harbor.lan"]
ca=["/tmp/buildkit-certs/harbor-ca.pem"] insecure = true
- name: Trust internal CA in BuildKit system store
run: |
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
echo "Builder: $BUILDER"
docker exec "$BUILDER" sh -c '
echo "--- cert landscape ---"
ls -la /etc/ssl/ /etc/ssl/certs/ 2>/dev/null | head -15
for f in /etc/ssl/certs/ca-certificates.crt /etc/ssl/cert.pem; do
[ -e "$f" ] || continue
cat /etc/buildkit/certs/harbor.lan/harbor-ca.pem >> "$f"
echo "Appended CA to $f"
break
done
'
docker restart "$BUILDER"
sleep 5
- name: Build and push image - name: Build and push image
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6

24
.gitea/workflows/telegraf-snmp.yaml
View File

@ -26,34 +26,12 @@ jobs:
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v3
- name: Write internal CA cert
run: |
mkdir -p /tmp/buildkit-certs
printf '%s\n' "${{ vars.PRIVATE_REGISTRY_CA_CERT }}" > /tmp/buildkit-certs/harbor-ca.pem
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3
with: with:
buildkitd-config-inline: | buildkitd-config-inline: |
[registry."harbor.lan"] [registry."harbor.lan"]
ca=["/tmp/buildkit-certs/harbor-ca.pem"] insecure = true
- name: Trust internal CA in BuildKit system store
run: |
BUILDER=$(docker ps --filter "name=buildx_buildkit" --format "{{.Names}}" | head -1)
echo "Builder: $BUILDER"
docker exec "$BUILDER" sh -c '
echo "--- cert landscape ---"
ls -la /etc/ssl/ /etc/ssl/certs/ 2>/dev/null | head -15
for f in /etc/ssl/certs/ca-certificates.crt /etc/ssl/cert.pem; do
[ -e "$f" ] || continue
cat /etc/buildkit/certs/harbor.lan/harbor-ca.pem >> "$f"
echo "Appended CA to $f"
break
done
'
docker restart "$BUILDER"
sleep 5
- name: Build and push image - name: Build and push image
uses: docker/build-push-action@v6 uses: docker/build-push-action@v6