From 110d1eab55cf8a2b9f23146d5b19e466a3f99ebc Mon Sep 17 00:00:00 2001
From: "Billy D." <billy.davies.10@icloud.com>
Date: Wed, 4 Feb 2026 15:18:06 -0500
Subject: [PATCH] fix: Configure Docker daemon for insecure registry before
 login

The docker/login-action needs the registry marked as insecure in the
Docker daemon config, not just in buildkitd. This adds a step to
configure /etc/docker/daemon.json with insecure-registries before
attempting to login.
---
 .gitea/workflows/build-push.yaml | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/.gitea/workflows/build-push.yaml b/.gitea/workflows/build-push.yaml
index 316f0e3..89ad423 100644
--- a/.gitea/workflows/build-push.yaml
+++ b/.gitea/workflows/build-push.yaml
@@ -98,6 +98,14 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      # Configure Docker daemon to allow insecure registry (self-signed cert)
+      - name: Configure Docker for insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          echo '{"insecure-registries": ["registry.lab.daviestechlabs.io"]}' | sudo tee /etc/docker/daemon.json
+          sudo systemctl restart docker || sudo service docker restart || true
+          sleep 2
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
@@ -153,6 +161,14 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      # Configure Docker daemon to allow insecure registry (self-signed cert)
+      - name: Configure Docker for insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          echo '{"insecure-registries": ["registry.lab.daviestechlabs.io"]}' | sudo tee /etc/docker/daemon.json
+          sudo systemctl restart docker || sudo service docker restart || true
+          sleep 2
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
@@ -206,6 +222,14 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      # Configure Docker daemon to allow insecure registry (self-signed cert)
+      - name: Configure Docker for insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          echo '{"insecure-registries": ["registry.lab.daviestechlabs.io"]}' | sudo tee /etc/docker/daemon.json
+          sudo systemctl restart docker || sudo service docker restart || true
+          sleep 2
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with:
@@ -259,6 +283,14 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      # Configure Docker daemon to allow insecure registry (self-signed cert)
+      - name: Configure Docker for insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          echo '{"insecure-registries": ["registry.lab.daviestechlabs.io"]}' | sudo tee /etc/docker/daemon.json
+          sudo systemctl restart docker || sudo service docker restart || true
+          sleep 2
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
         with: