Fetch templates over HTTP instead of shelling out to git #7

2026-09-26T18:59:15+10:00

unkin-agent commented

2026-09-26 18:59:15 +10:00

The runtime image is distroless and has no git binary, so every template sync failed and bootapi silently served the stale embedded set (no image.ks, no _storage, no optiplex entries).

fetch the branch tarball (/archive/.tar.gz) and extract it into an in-memory FS; no checkout, no writable volume, no git subprocesses
digest the extracted tree rather than the archive bytes, so a recompressed identical archive is not a change
skip archive entries that would escape the tree
log the source commit from Gitea's immutable Link header

The runtime image is distroless and has no git binary, so every template sync failed and bootapi silently served the stale embedded set (no image.ks, no _storage, no optiplex entries). - fetch the branch tarball (<repo>/archive/<branch>.tar.gz) and extract it into an in-memory FS; no checkout, no writable volume, no git subprocesses - digest the extracted tree rather than the archive bytes, so a recompressed identical archive is not a change - skip archive entries that would escape the tree - log the source commit from Gitea's immutable Link header

unkin-agent added 1 commit 2026-09-26 18:59:15 +10:00

Fetch templates over HTTP instead of shelling out to git

ci/woodpecker/pr/build Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

ci/woodpecker/pr/test Pipeline was successful

Details

a414918350

The runtime image is distroless and has no git binary, so every sync
failed and bootapi silently served the stale embedded templates.

- fetch the branch tarball (<repo>/archive/<branch>.tar.gz) and extract
  it into an in-memory FS; no checkout, no writable volume
- digest the extracted tree, not the archive bytes, so a recompressed
  identical archive is not a change
- skip entries that would escape the tree
- log the source commit from Gitea's immutable Link header

benvin merged commit edc90f01d9 into main

2026-09-26 23:50:26 +10:00

benvin deleted branch benvin/templates-http

2026-09-26 23:50:28 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/bootapi#7