fix: use type=raw for Docker tags to preserve v prefix

docker/metadata-action type=semver strips the v prefix, causing tag mismatch between git tags (v0.1.3) and Docker tags (0.1.3). Switch to type=raw to pass through the version as-is.
fix: switch Docker build to plain docker build/push with insecure registry
2026-02-22 09:58:45 -05:00 · 2026-02-21 22:38:03 -05:00
1 changed files with 23 additions and 12 deletions
--- a/.gitea/workflows/build-push.yaml
+++ b/.gitea/workflows/build-push.yaml
@@ -9,8 +9,8 @@ on:
 env:
  NTFY_URL: http://ntfy.observability.svc.cluster.local:80
  GOPRIVATE: git.daviestechlabs.io
-  REGISTRY: registry.lab.daviestechlabs.io/daviestechlabs
-  REGISTRY_HOST: registry.lab.daviestechlabs.io
+  REGISTRY: gitea-http.gitea.svc.cluster.local:3000/daviestechlabs
+  REGISTRY_HOST: gitea-http.gitea.svc.cluster.local:3000
  IMAGE_NAME: stt-module

 jobs:
@@ -121,8 +121,12 @@ jobs:
      - name: Checkout
        uses: actions/checkout@v4

-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Configure insecure registry
+        run: |
+          sudo mkdir -p /etc/docker
+          echo '{"insecure-registries": ["${{ env.REGISTRY_HOST }}"]}' | sudo tee /etc/docker/daemon.json
+          sudo kill -SIGHUP "$(pidof dockerd)" || true
+          sleep 3

      - name: Login to Gitea Registry
        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "${{ env.REGISTRY_HOST }}" -u "${{ secrets.REGISTRY_USER }}" --password-stdin
@@ -137,17 +141,24 @@ jobs:
        with:
          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
          tags: |
-            type=semver,pattern={{version}},value=${{ needs.release.outputs.version }}
-            type=semver,pattern={{major}}.{{minor}},value=${{ needs.release.outputs.version }}
+            type=raw,value=${{ needs.release.outputs.version }}
            type=raw,value=latest,enable={{is_default_branch}}

      - name: Build and push
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
+        run: |
+          # Build with all tags
+          TAGS=""
+          while IFS= read -r tag; do
+            [ -n "$tag" ] && TAGS="$TAGS -t $tag"
+          done <<< "${{ steps.meta.outputs.tags }}"
+          docker build $TAGS \
+            --label "org.opencontainers.image.source=${{ gitea.server_url }}/${{ gitea.repository }}" \
+            --label "org.opencontainers.image.revision=${{ gitea.sha }}" \
+            .
+          # Push each tag
+          while IFS= read -r tag; do
+            [ -n "$tag" ] && docker push "$tag"
+          done <<< "${{ steps.meta.outputs.tags }}"


  notify:
Author	SHA1	Message	Date
Billy D.	359044eb21	fix: use type=raw for Docker tags to preserve v prefix Some checks failed CI / Release (push) Successful in 1m26s Details CI / Lint (push) Successful in 2m41s Details CI / Docker Build & Push (push) Failing after 2m42s Details CI / Test (push) Successful in 2m45s Details CI / Notify (push) Successful in 1s Details docker/metadata-action type=semver strips the v prefix, causing tag mismatch between git tags (v0.1.3) and Docker tags (0.1.3). Switch to type=raw to pass through the version as-is.	2026-02-22 09:58:45 -05:00
Billy D.	165dbd5f34	fix: switch Docker build to plain docker build/push with insecure registry All checks were successful CI / Docker Build & Push (push) Successful in 3m14s Details CI / Release (push) Successful in 1m31s Details CI / Test (push) Successful in 3m3s Details CI / Lint (push) Successful in 2m51s Details CI / Notify (push) Successful in 2s Details - Drop buildx (setup-buildx-action, build-push-action) - Use insecure HTTP registry with SIGHUP daemon reload - Use org-level PAT secrets for registry auth	2026-02-21 22:38:03 -05:00