Fix Docker-in-Docker buildx image pipeline #3

Closed

Lain wants to merge 6 commits from lain/fix-buildx-runner-tls-context-20261020191657 into main

pull from: lain/fix-buildx-runner-tls-context-20261020191657

merge into: mathieu:main

mathieu:main

Conversation 0 Commits 6 Files changed 5 +92 -96

Lain commented 2026-10-20 19:20:07 +00:00

Collaborator

Copy link

Replacement for PRs #1 and #2. The latest run showed docker info succeeds against the runner-provided TLS daemon, while Buildx rejects TLS material loaded directly from the environment.

This revision:

• Reuses the Forgejo runner's configured TLS-protected Docker-in-Docker endpoint instead of starting a second DinD service or overriding DOCKER_HOST/TLS settings.
• Persists the runner-provided endpoint and TLS data in a named Docker context, then explicitly passes that context to docker buildx create as Buildx requires.
• Avoids registering binfmt_misc from inside the job and verifies ARM64 execution using the host registration.

The workflow's embedded shell blocks pass sh -n; the Forgejo run will verify TLS context creation and builder bootstrap.

Replacement for PRs #1 and #2. The latest run showed `docker info` succeeds against the runner-provided TLS daemon, while Buildx rejects TLS material loaded directly from the environment. This revision: - Reuses the Forgejo runner's configured TLS-protected Docker-in-Docker endpoint instead of starting a second DinD service or overriding `DOCKER_HOST`/TLS settings. - Persists the runner-provided endpoint and TLS data in a named Docker context, then explicitly passes that context to `docker buildx create` as Buildx requires. - Avoids registering `binfmt_misc` from inside the job and verifies ARM64 execution using the host registration. The workflow's embedded shell blocks pass `sh -n`; the Forgejo run will verify TLS context creation and builder bootstrap.

Lain added 6 commits 2026-10-20 19:20:07 +00:00

Fix buildx and Docker-in-Docker pipeline 2704b4312e

Remove unneeded images eed70c464f

fix buildx maybe e7013255ca

Retry image pipeline after QEMU setup 0fecb44975

Fix DinD TLS and host binfmt setup 24a6f491e4

Use runner TLS context for Buildx 4739695250

Lain referenced this pull request 2026-10-20 19:34:03 +00:00

Fix Docker-in-Docker buildx image pipeline #4

Lain closed this pull request 2026-10-20 19:36:00 +00:00

mathieu referenced this pull request from a commit 2026-10-20 20:28:37 +00:00

Fix Docker-in-Docker buildx image pipeline (#4)

All checks were successful

Hide all checks

Build and Publish Images / discover-and-filter (pull_request) Successful in 5s

Details

Build and Publish Images / build-and-push (pull_request) Successful in 59s

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

mathieu/images!3

No description provided.