mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Myasnikov DaniilandClaude Opus 4.8
e7abea9576
The "Set up Buildx" step in build-main.yaml ran without DOCKER_CONFIG, so docker/setup-buildx-action created the docker-container builder under the default ~/.docker. The build step runs with DOCKER_CONFIG=$RUNNER_TEMP/.docker (seeded before the builder existed and holding the OCIR auth), so it could not find the builder and failed immediately with `no builder "builder-<uuid>" found`. The post-job `docker buildx rm` still succeeded because the action's cleanup runs under the default config where the builder actually lived. Set DOCKER_CONFIG on the Set up Buildx step so the builder instance is created in the same config the build step reads. Assisted-By: Claude <noreply@anthropic.com> Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
99 lines
3.8 KiB
YAML
99 lines
3.8 KiB
YAML
name: Build cache (main)
|
|
|
|
# Warms the shared mode=max build cache so PR builds start hot.
|
|
#
|
|
# PR builds (pull-requests.yaml) read the cache but never write it
|
|
# (WRITE_CACHE unset -> 0). Only this serialized main build writes
|
|
# CACHE_REGISTRY/<img>:buildcache, so concurrent PR builds never race on the
|
|
# cache manifest -- the 409 collisions PR #2711 fixed for image tags would
|
|
# otherwise reappear on the cache ref. Cache is mode=max so all multistage
|
|
# `builder` stages are cached, not just the final stage as with inline.
|
|
#
|
|
# This job builds on a docker-container buildx builder, NOT the host's default
|
|
# embedded `docker` driver: `--cache-to type=registry,mode=max` is unsupported
|
|
# on the docker driver unless the daemon runs the containerd image store, so on
|
|
# a classic store the warmer would otherwise fail to export any cache. The
|
|
# container driver also gives this build its own buildkit (separate bbolt), so
|
|
# the warmer never contends with PR builds on the shared embedded buildkit.
|
|
|
|
env:
|
|
# Same per-CI registry as pull-requests.yaml; the cache is co-located here.
|
|
REGISTRY: iad.ocir.io/idyksih5sir9/cozystack
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths-ignore:
|
|
- 'docs/**'
|
|
|
|
# Only the newest main commit's cache matters; cancel older in-flight warmers.
|
|
concurrency:
|
|
group: build-main-cache
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
warm-cache:
|
|
name: Warm build cache
|
|
runs-on: [self-hosted]
|
|
timeout-minutes: 90
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
fetch-tags: true
|
|
# This privileged workflow has packages:write and an OCIR push token;
|
|
# it never pushes git, so don't leave the checkout's GITHUB_TOKEN in
|
|
# .git/config where a later build step could read it.
|
|
persist-credentials: false
|
|
|
|
- name: Set up Docker config
|
|
run: |
|
|
if [ -d ~/.docker ]; then
|
|
cp -r ~/.docker "${{ runner.temp }}/.docker"
|
|
fi
|
|
|
|
- name: Login to OCIR
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.OCIR_USER }}
|
|
password: ${{ secrets.OCIR_TOKEN }}
|
|
registry: iad.ocir.io
|
|
env:
|
|
DOCKER_CONFIG: ${{ runner.temp }}/.docker
|
|
|
|
# docker-container driver: required for `--cache-to type=registry,mode=max`
|
|
# (unsupported on the host's default docker driver) and gives this build an
|
|
# isolated buildkit so it never contends with PR builds on the shared one.
|
|
- name: Set up Buildx (docker-container driver)
|
|
id: buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
with:
|
|
driver: docker-container
|
|
env:
|
|
# buildx stores builder instances under $DOCKER_CONFIG/buildx/instances/.
|
|
# Create the builder in the SAME config the build step reads
|
|
# (runner.temp/.docker, seeded above and holding the OCIR auth); without
|
|
# this the builder lands in the default ~/.docker and the build step fails
|
|
# with `no builder "<name>" found`.
|
|
DOCKER_CONFIG: ${{ runner.temp }}/.docker
|
|
|
|
- name: Build all images and write mode=max cache
|
|
run: make build
|
|
env:
|
|
DOCKER_CONFIG: ${{ runner.temp }}/.docker
|
|
# Build on the docker-container builder created above (BUILDX_ARGS adds
|
|
# --builder=$(BUILDER)); buildx forwards the OCIR auth from DOCKER_CONFIG
|
|
# to the container builder for cache reads/writes and image pushes.
|
|
BUILDER: ${{ steps.buildx.outputs.name }}
|
|
# WRITE_CACHE=1 turns on --cache-to (mode=max) for every image.
|
|
WRITE_CACHE: '1'
|
|
# Publish a floating :main handle; do not move :latest (releases do).
|
|
IMAGE_TAG: main
|
|
PUBLISH_VERSIONED: '0'
|
|
PUBLISH_FLOATING: '0'
|