unkin/container-agent-base
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add buildkit_config CA trust for artifactapi push #4

Merged
benvin merged 1 commits from benvin/buildx-ca-config into main 2026-08-15 18:46:41 +10:00
Conversation 0 Commits 1 Files Changed 1
+3
unkin-agent commented 2026-08-15 18:31:03 +10:00
Member
Copy Link
Copy Source

The buildx push step runs buildkitd in its own container, which does not inherit the plugin image trust store, so pushing to the artifactapi registry fails on the internal (Vault) CA.

Point the buildx docker-container builder at the in-image CA via buildkit_config, matching the fix proven in jellyfin-ha v0.1.2.

Change:

  • Add settings.buildkit_config to the docker push step referencing /etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt.
The buildx push step runs buildkitd in its own container, which does not inherit the plugin image trust store, so pushing to the artifactapi registry fails on the internal (Vault) CA. Point the buildx docker-container builder at the in-image CA via buildkit_config, matching the fix proven in jellyfin-ha v0.1.2. Change: - Add settings.buildkit_config to the docker push step referencing /etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt.
unkin-agent added 1 commit 2026-08-15 18:31:03 +10:00
ci: add buildkit_config CA trust for artifactapi push
ci/woodpecker/pr/build Pipeline was successful
Details
7ae46c4966
benvin merged commit c1b3f18829 into main 2026-08-15 18:46:41 +10:00
benvin deleted branch benvin/buildx-ca-config 2026-08-15 18:46:41 +10:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/container-agent-base#4
Delete Branch "benvin/buildx-ca-config"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?