changed to use secret for docker registry

This commit is contained in:
Brian Bjarke Jensen
2026-01-13 13:22:05 +01:00
parent 07b5c11f43
commit a1c5e7c3a3
+8 -8
View File
@@ -32,15 +32,15 @@ jobs:
mkdir -p ~/.docker mkdir -p ~/.docker
echo '{ echo '{
"auths": {}, "auths": {},
"insecure-registries": ["10.0.0.2:3000"] "insecure-registries": ["${{ secrets.DOCKER_REGISTRY }}"]
}' > ~/.docker/config.json }' > ~/.docker/config.json
# Login to internal registry # Login to internal registry
echo "${{ secrets.CI_RUNNER_TOKEN }}" | docker login 10.0.0.2:3000 --username "${{ gitea.actor }}" --password-stdin echo "${{ secrets.CI_RUNNER_TOKEN }}" | docker login ${{ secrets.DOCKER_REGISTRY }} --username "${{ gitea.actor }}" --password-stdin
# Pull and inspect the image # Pull and inspect the image
if docker pull 10.0.0.2:3000/brian/mlflow-full:latest 2>/dev/null; then if docker pull ${{ secrets.DOCKER_REGISTRY }}/brian/mlflow-full:latest 2>/dev/null; then
BASE_IMAGE_DIGEST=$(docker inspect 10.0.0.2:3000/brian/mlflow-full:latest | jq -r '.[0].Config.Labels["org.opencontainers.image.base.digest"] // empty') BASE_IMAGE_DIGEST=$(docker inspect ${{ secrets.DOCKER_REGISTRY }}/brian/mlflow-full:latest | jq -r '.[0].Config.Labels["org.opencontainers.image.base.digest"] // empty')
if [ -n "$BASE_IMAGE_DIGEST" ] && [ "$BASE_IMAGE_DIGEST" != "null" ]; then if [ -n "$BASE_IMAGE_DIGEST" ] && [ "$BASE_IMAGE_DIGEST" != "null" ]; then
echo "base_image_digest=$BASE_IMAGE_DIGEST" >> $GITHUB_OUTPUT echo "base_image_digest=$BASE_IMAGE_DIGEST" >> $GITHUB_OUTPUT
@@ -118,7 +118,7 @@ jobs:
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3
with: with:
config-inline: | config-inline: |
[registry."10.0.0.2:3000"] [registry."${{ secrets.DOCKER_REGISTRY }}"]
http = true http = true
insecure = true insecure = true
- name: Log in to Gitea Container Registry - name: Log in to Gitea Container Registry
@@ -127,16 +127,16 @@ jobs:
mkdir -p ~/.docker mkdir -p ~/.docker
echo '{ echo '{
"auths": {}, "auths": {},
"insecure-registries": ["10.0.0.2:3000"] "insecure-registries": ["${{ secrets.DOCKER_REGISTRY }}"]
}' > ~/.docker/config.json }' > ~/.docker/config.json
# Login using direct docker command # Login using direct docker command
echo "${{ secrets.CI_RUNNER_TOKEN }}" | docker login 10.0.0.2:3000 --username "${{ gitea.actor }}" --password-stdin echo "${{ secrets.CI_RUNNER_TOKEN }}" | docker login ${{ secrets.DOCKER_REGISTRY }} --username "${{ gitea.actor }}" --password-stdin
- name: Extract metadata - name: Extract metadata
id: meta id: meta
uses: docker/metadata-action@v5 uses: docker/metadata-action@v5
with: with:
images: 10.0.0.2:3000/${{ gitea.repository_owner }}/${{ gitea.event.repository.name }} images: ${{ secrets.DOCKER_REGISTRY }}/${{ gitea.repository_owner }}/${{ gitea.event.repository.name }}
tags: | tags: |
type=schedule,pattern={{date 'YYYYMMDD'}} type=schedule,pattern={{date 'YYYYMMDD'}}
type=raw,value=latest type=raw,value=latest