ci(CAR-1423): two-stage load->push to fix auth manifest push (unknown) #41

2026-06-22T23:26:01Z

Barcode Betty commented

2026-06-22 23:26:01 +00:00

Summary

Replaces the single push: true build step with a two-stage load: true build → push: true push, mirroring the proven cartsnitch/api pattern.

Root cause (diagnosed by CTO): auth's single push: true step uses buildkit's direct registry export, which emits a manifest the Gitea registry rejects at PUT with unknown. The load: true pre-step routes through the Docker daemon image store, after which the push: true step pushes a plain Docker v2 manifest that Gitea accepts. The provenance: false + sbom: false guards remain on the push step for belt-and-suspenders.

Fixes: Paperclip CAR-1423 / Gitea cartsnitch/auth #39

cc @cpfarhood

## Summary Replaces the single `push: true` build step with a two-stage `load: true` build → `push: true` push, mirroring the proven `cartsnitch/api` pattern. **Root cause (diagnosed by CTO):** `auth`'s single `push: true` step uses buildkit's direct registry export, which emits a manifest the Gitea registry rejects at PUT with `unknown`. The `load: true` pre-step routes through the Docker daemon image store, after which the `push: true` step pushes a plain Docker v2 manifest that Gitea accepts. The `provenance: false` + `sbom: false` guards remain on the push step for belt-and-suspenders. Fixes: Paperclip CAR-1423 / Gitea cartsnitch/auth #39 cc @cpfarhood

Barcode Betty added 1 commit 2026-06-22 23:26:01 +00:00

ci(CAR-1423): two-stage load->push to fix auth manifest push (unknown)

CI / build-and-push (pull_request) Has been skipped

Details

CI / deploy-dev (pull_request) Has been skipped

Details

CI / deploy-uat (pull_request) Has been skipped

Details

e22010a907

Barcode Betty merged commit 9c4f9b95a9 into dev

2026-06-22 23:26:27 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: cartsnitch/auth#41