unkin-agent
2001204e0b
Phase-1 SSO/app-passwords for jellyfin needs the ldapauth and sso plugins present without relying on the in-app catalog (which the plugins-baked PVC would otherwise let drift). Pin the newest release of each whose targetAbi is <= the pinned server version (10.11.6) and let the image own the version. - Add a plugins build stage that downloads, sha256-verifies (matching each release's published .sha256), and unpacks the plugin zips into versioned dirs baked at /usr/share/jellyfin/plugins-baked. - LDAP Authentication 22.0.0.0 (targetAbi 10.11.2.0; v23 needs 10.11.9). - SSO Authentication 4.0.0.4 (targetAbi 10.11.0.0). - Add docker-entrypoint.sh that syncs baked plugin dirs into /config/plugins on every start, removing any stale versioned dir of the same plugin so the image controls the version across restarts; preserves plugin configurations. - Point ENTRYPOINT at the new script.
jellyfin-ha (container build)
Build-orchestration repo for ZoltyMat/jellyfin-ha — a Jellyfin fork that adds distributed, Redis-backed transcoding for multi-pod Kubernetes (lease-aware cleanup, HA session takeover, optional PostgreSQL).
This repo does not vendor the fork's source. It pins an upstream commit, builds the .NET 9 server, and produces a runtime container image pushed to the Gitea registry.
What it produces
artifactapi.k8s.syd1.au.unkin.net/docker-internal/jellyfin-ha:<tag> — an mcr.microsoft.com/dotnet/aspnet:9.0 based image with ffmpeg and
the prebuilt jellyfin-web client, running the published jellyfin-ha server.
Layout
| File | Purpose |
|---|---|
UPSTREAM_REF |
Pinned upstream commit SHA. Bumping the fork = edit this + cut a release. |
Dockerfile.runtime |
Runtime-only image; COPYs the CI-produced publish-output/ and the web client. |
Makefile |
Local make publish / make build; make patch|minor|major to tag + push a release. |
.woodpecker/build.yaml |
PR pipeline: dotnet publish + docker dry_run. |
.woodpecker/docker.yaml |
Tag (v*) pipeline: dotnet publish + build & push to the Gitea registry. |
Releasing
- To track a newer upstream, update
UPSTREAM_REFto the desired commit SHA and merge via PR. - Cut a release:
make patch(orminor/major) tagsvX.Y.Zand pushes it, which triggers.woodpecker/docker.yamlto build and pushartifactapi.k8s.syd1.au.unkin.net/docker-internal/jellyfin-ha:vX.Y.Z+:latest.
Local build
make build # clones pinned upstream, dotnet publish, docker build
Requires the .NET 9 SDK and Docker. make publish runs just the clone + publish into ./publish-output.
Deployment
Deployed to Kubernetes via ArgoCD — see argocd-apps (apps/base/jellyfin, media ApplicationSet/project).