Build images with kaniko instead of privileged buildx
ci/woodpecker/manual/ci Pipeline was successful

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
azykov@mail.ru
2026-10-08 11:10:31 +03:00
co-authored by Claude Sonnet 5.5
parent 52d8e0f7e0
commit 6701c6bc0d
2 changed files with 9 additions and 10 deletions
+1 -1
View File
@@ -109,5 +109,5 @@ pnpm typecheck
`.woodpecker/ci.yaml`: typecheck + tests on every push/PR, then images are pushed on `main` and `ci`
(tags: short commit SHA and branch name, e.g. `:main`). Images go to the Gitea registry (`git.aggtaa.com/anton/cardy-*`); add secrets `registry_username`
(Gitea user + access token with `write:package`) and `registry_password`, and mark the repository as Trusted (buildx plugin is privileged).
(Gitea user + access token with `write:package`) and `registry_password`. Images are built with kaniko, so the repository doesn't need to be Trusted.
`docker/compose.example.yml` shows how to run the images. APK/OTA publishing stays local (needs the signing key).