From 597752734878855a6ec2fa2a909c0a0379844528 Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 15 Aug 2026 16:34:02 +1000 Subject: [PATCH] Dockerfile: fully-qualify base image (buildah short-name TTY fix) buildah (quay.io/buildah/stable) enforces short-name resolution and cannot prompt without a TTY, so 'FROM woodpeckerci/plugin-docker-buildx:latest' errors. Qualify as docker.io/... . Keep it on docker.io (public CA) deliberately: this image is what bootstraps internal-CA trust, so pulling its own base through the internal-CA artifactapi registry would reintroduce the x509 problem in-build. --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 5e0c85d..a2ee409 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM woodpeckerci/plugin-docker-buildx:latest +FROM docker.io/woodpeckerci/plugin-docker-buildx:latest # buildkit reads this to trust artifactapi's internal-CA registry on push COPY unkin-ca.crt /etc/docker/certs.d/artifactapi.k8s.syd1.au.unkin.net/ca.crt # fallback: system trust store (docker login / other code paths)