humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Refactor Docker credential handling in build.yml

Browse Source 
Updated Docker credential handling and ownership transfer in build workflow.
This commit is contained in:
humocs-man
2026-05-17 19:59:40 +02:00
committed by GitHub
parent 37ae1b0735
commit feb0602b05
1 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build.yml
+6 -3
View File
@@ -105,15 +105,18 @@ jobs:
podman push localhost/${{ env.IMAGE_NAME }}:monolith ghcr.io/${{ github.repository }}:monolith podman push localhost/${{ env.IMAGE_NAME }}:monolith ghcr.io/${{ github.repository }}:monolith
# JETZT GARANTIERT FEHLERFREI: rpm-ostree liest standardisiert direkt aus der Registry # JETZT GARANTIERT FEHLERFREI: rpm-ostree liest standardisiert direkt aus der Registry
# FIX: Wir mounten an einen sicheren Pfad und setzen REGISTRY_AUTH_FILE
- name: Apply native bootc rechunking - name: Apply native bootc rechunking
id: rechunk id: rechunk
run: | run: |
set -x set -x
mkdir -p ./chunkah-out mkdir -p ./chunkah-out
# Wir reichen die Docker-Credentials des Runners in den Container, damit er an GHCR rankommt # Wir mounten die config.json direkt nach /auth.json (das klappt immer)
# und übergeben die Variable via -e REGISTRY_AUTH_FILE
sudo podman run --rm --privileged \ sudo podman run --rm --privileged \
-v /home/runner/.docker/config.json:/root/.docker/config.json:ro \ -v /home/runner/.docker/config.json:/auth.json:ro \
-e REGISTRY_AUTH_FILE=/auth.json \
-v .:/workspace:z \ -v .:/workspace:z \
-w /workspace \ -w /workspace \
quay.io/fedora/fedora-bootc:44 \ quay.io/fedora/fedora-bootc:44 \
@@ -124,7 +127,7 @@ jobs:
--from=docker:ghcr.io/${{ github.repository }}:monolith \ --from=docker:ghcr.io/${{ github.repository }}:monolith \
--output=oci-archive:/workspace/chunkah-out/image.ociarchive --output=oci-archive:/workspace/chunkah-out/image.ociarchive
# Besitzrechte korrigieren # Besitzrechte wieder an den normalen GHA-User übergeben
sudo chown -R runner:docker ./chunkah-out sudo chown -R runner:docker ./chunkah-out
- name: Push final 128-Layer Image via Skopeo (with ZSTD Compression) - name: Push final 128-Layer Image via Skopeo (with ZSTD Compression)