Build on container-base almalinux9 0.1.3 #5

Merged
benvin merged 1 commits from container-base-0-1-3 into main 2026-10-02 23:28:27 +10:00
Member

The 0.1.0 base shipped only the root CA in unkin-ca-certificates, so s3.ceph.unkin.net — a bare leaf issued by the intermediate — failed to verify. The baked-in go-cache-plugin could never reach the shared build cache, and because that cache is best-effort, consumers would go green while silently never caching.

  • Bump BASE_VERSION to 0.1.3, which ships both anchors.

Verified in the built image: curl https://s3.ceph.unkin.net/ 200 (was 000), artifactapi repodata still 200, and a real GOCACHEPROG build hit S3 for 548 objects with 0 get/put errors.

The 0.1.0 base shipped only the root CA in `unkin-ca-certificates`, so `s3.ceph.unkin.net` — a bare leaf issued by the intermediate — failed to verify. The baked-in `go-cache-plugin` could never reach the shared build cache, and because that cache is best-effort, consumers would go green while silently never caching. - Bump `BASE_VERSION` to `0.1.3`, which ships both anchors. Verified in the built image: `curl https://s3.ceph.unkin.net/` 200 (was 000), artifactapi repodata still 200, and a real `GOCACHEPROG` build hit S3 for 548 objects with 0 get/put errors.
unkin-agent added 1 commit 2026-10-02 23:23:57 +10:00
Build on container-base almalinux9 0.1.3
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/build Pipeline was successful
7b8dfe2663
The 0.1.0 base shipped only the root CA in unkin-ca-certificates, so
s3.ceph.unkin.net — a bare leaf issued by the intermediate — failed to
verify and the baked-in go-cache-plugin could never reach the shared
build cache. 0.1.3 ships both anchors.

- Bump BASE_VERSION to 0.1.3.
benvin merged commit 066e56ade8 into main 2026-10-02 23:28:27 +10:00
benvin deleted branch container-base-0-1-3 2026-10-02 23:28:27 +10:00
Sign in to join this conversation.