From b5399343cd1103787bb6b9c7ca94324e20eeb763 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 30 Jul 2026 00:34:59 +1000
Subject: [PATCH 1/4] ci: push images to artifactapi registry instead of gitea

Hard switch of the docker push target from the Gitea registry to the
artifactapi local docker registry (docker-internal); the Gitea VM and its
registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since
artifactapi accepts unauthenticated in-cluster pushes. Also repoints the Dockerfile FROM agent-base base image.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 .woodpecker/build.yaml  | 2 +-
 .woodpecker/docker.yaml | 7 ++-----
 Dockerfile              | 2 +-
 3 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index 2ea7f12..8e2d226 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -5,5 +5,5 @@ steps:
   - name: docker-build
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      repo: git.unkin.net/unkin/agent-dev
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev
       dry_run: true
diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml
index 6094faa..f38413d 100644
--- a/.woodpecker/docker.yaml
+++ b/.woodpecker/docker.yaml
@@ -6,11 +6,8 @@ steps:
   - name: docker
     image: woodpeckerci/plugin-docker-buildx
     settings:
-      registry: git.unkin.net
-      repo: git.unkin.net/unkin/agent-dev
-      username: droneci
-      password:
-        from_secret: DRONECI_PASSWORD
+      registry: artifactapi.k8s.syd1.au.unkin.net
+      repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev
       tags:
         - ${CI_COMMIT_TAG}
         - latest
diff --git a/Dockerfile b/Dockerfile
index b00e705..5544c36 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM git.unkin.net/unkin/agent-base:latest
+FROM artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:latest
 
 USER root
 

From b9fca00e18922b3ceed0d0e455fb82cd414391c8 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 30 Jul 2026 00:43:11 +1000
Subject: [PATCH 2/4] test: buildkit_config insecure for artifactapi FROM pull

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 .woodpecker/build.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index 8e2d226..6014f5b 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -7,3 +7,6 @@ steps:
     settings:
       repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev
       dry_run: true
+      buildkit_config: |
+        [registry."artifactapi.k8s.syd1.au.unkin.net"]
+          insecure = true

From 1fed0bfd4aa38f073fd28c408576da5a5ae50393 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 30 Jul 2026 00:46:45 +1000
Subject: [PATCH 3/4] test: insecure_skip_verify for artifactapi

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 .woodpecker/build.yaml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index 6014f5b..be461e8 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -7,6 +7,4 @@ steps:
     settings:
       repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev
       dry_run: true
-      buildkit_config: |
-        [registry."artifactapi.k8s.syd1.au.unkin.net"]
-          insecure = true
+      insecure_skip_verify: true

From 1d7b1be7b864dfad0afbc87533fafc946e6ea321 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 30 Jul 2026 00:50:54 +1000
Subject: [PATCH 4/4] revert Dockerfile FROM to gitea agent-base; keep
 push-target switch

The buildkit builder in the k8s runner cannot pull FROM the artifactapi
registry (internal CA is not trusted). Keep the base-image FROM on gitea;
only the push target moves to artifactapi.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 .woodpecker/build.yaml | 1 -
 Dockerfile             | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
index be461e8..8e2d226 100644
--- a/.woodpecker/build.yaml
+++ b/.woodpecker/build.yaml
@@ -7,4 +7,3 @@ steps:
     settings:
       repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev
       dry_run: true
-      insecure_skip_verify: true
diff --git a/Dockerfile b/Dockerfile
index 5544c36..b00e705 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-base:latest
+FROM git.unkin.net/unkin/agent-base:latest
 
 USER root