Skip to content

fix(ci): the apk drift check defaults to a Docker Hub mirror when the engine configures none #158

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
antoinetoussaint-byte wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(ci): the apk drift check defaults to a Docker Hub mirror when the engine configures none #158

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 9 additions & 1 deletion .github/scripts/refresh-apk-pins.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,7 +50,15 @@ base="$(sed -n 's/^ARG GO_IMAGE=\(.*\)$/\1/p' "$DOCKERFILE" | head -1)"
# Direct registry references cannot express an HTTP mirror's transport policy,
# so leave those to Docker. If the direct pull fails, Docker also retains its
# normal ordered mirror/origin fallback through the original reference.
mirror="$(docker info --format '{{range .RegistryConfig.Mirrors}}{{println .}}{{end}}' | head -1)"
#
# An engine with no mirror configured — a GitHub-hosted runner, where this runs
# weekly — would otherwise pull docker.io directly, and from the runners' shared
# IPs Docker Hub answers `toomanyrequests` often enough that the check would go
# red about a rate limit instead of about drift. So the default is a public
# Docker Hub mirror; the digest is unchanged, so it serves the identical bytes.
# DOCKER_HUB_MIRROR overrides both.
mirror="${DOCKER_HUB_MIRROR:-$(docker info --format '{{range .RegistryConfig.Mirrors}}{{println .}}{{end}}' | head -1)}"
[[ -n "$mirror" ]] || mirror="https://mirror.gcr.io"
if [[ "$mirror" == https://* && "$base" == golang:*@sha256:* ]]; then
mirror="${mirror#https://}"
mirrored="${mirror%/}/library/$base"
Expand Down
Loading