The buildx docker-container builder runs buildkitd in its own container and performs the push. It needs the artifactapi internal (Vault) CA via buildkit_config even though the plugin image already trusts it. Point the builder at the in-image CA baked at /etc/docker/certs.d/<registry>/ca.crt.
The upstream woodpeckerci/plugin-docker-buildx image does not trust the
internal CA, so buildx pushes to artifactapi fail on TLS verification.
Swap it for the CA-baked custom image published in the docker-internal
repo, in both the tag push (docker.yaml) and PR dry-run (build.yaml)
steps.
Hard switch of the docker push target from the Gitea registry to the
artifactapi local docker registry (docker-internal); the Gitea VM and its
registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since
artifactapi accepts unauthenticated in-cluster pushes.
Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
- REST API for calculating age breakdowns (years, months, weeks, days, hours, minutes, seconds)
- Birthtime configured as Unix timestamps
- Sleeps until next birthday countdown
- Per-person lookup via GET /age/{name}
- Docker and Makefile build support
- Woodpecker CI pipelines
unkin-agent
unkinben