ci: build through the internal package cache (CT130 pkg-cache) #5

Merged
jknapp merged 1 commits from ci/pkg-cache into trunk 2026-10-22 14:15:10 +00:00
1 Commits
Author SHA1 Message Date
shadowdaoandClaude Opus 5.5 9166c0953e ci: build through the internal package cache (CT130 pkg-cache)
- Base image pinned by digest resolved directly from Docker Hub
  (.gitea/scripts/resolve-base-image.sh); registry mirror only when pinned.
- Probe the cache over TLS with the pinned CA; without it, builds use the
  upstream repositories and Docker Hub exactly as before.
- Dockerfile: ARG BASE_IMAGE / PKG_CACHE; package RUN rewrites repos via
  scripts/pkg-cache-repos.sh (canonical copy from cloud-apache-container),
  installs epel-release with GPG-verified release-install, restores repo
  files before the RUN ends.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-22 07:14:39 -07:00