quine-global-labs/quine-linux
1
1
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions 1

vendor-images.sh: copy digest-pinned images by digest, store them by tag [skip ci]

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Philip Peterson 2026-10-30 21:40:07 -08:00
parent 5a1c89b705
commit 3e5093c16f
1 changed files with 9 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
.forgejo/vendor-images.sh
View file

@ -18,17 +18,21 @@ mirror=${MIRROR:-forge.quinefoundation.com/quine-global-labs/mirror}
export CONTAINERS_REGISTRIES_CONF=/dev/null export CONTAINERS_REGISTRIES_CONF=/dev/null
for ref in "$@"; do for ref in "$@"; do
dest="docker://$mirror/${ref%@*}" src="docker://$ref"
dest="docker://$mirror/$ref"
opts=(--multi-arch system)
if [[ $ref == *@sha256:* ]]; then if [[ $ref == *@sha256:* ]]; then
# Pinned by digest: copy the whole index unchanged, so the digest the # Pinned by digest: copy the whole index unchanged, so the digest the
# build asks for exists on the mirror. # build asks for exists on the mirror. skopeo refuses a reference with
# both a tag and a digest, so read by digest and write by tag.
name=${ref%@*}
src="docker://${name%:*}@${ref#*@}"
dest="docker://$mirror/$name"
opts=(--multi-arch all --preserve-digests) opts=(--multi-arch all --preserve-digests)
else
opts=(--multi-arch system)
fi fi
echo "::group::$ref" echo "::group::$ref"
# Layers already on the mirror aren't downloaded again. # Layers already on the mirror aren't downloaded again.
skopeo copy --retry-times 5 "${opts[@]}" "docker://$ref" "$dest" || skopeo copy --retry-times 5 "${opts[@]}" "$src" "$dest" ||
echo "::warning::couldn't vendor $ref; builds get the mirror's last copy, or upstream's" echo "::warning::couldn't vendor $ref; builds get the mirror's last copy, or upstream's"
echo "::endgroup::" echo "::endgroup::"
done done