shadowdaoandClaude Opus 5.5
517a091539
- BASE_IMAGE: CI resolves almalinux:10-minimal to almalinux@sha256:<digest> directly at registry-1.docker.io; the pkg-cache registry mirror is only used for a digest-pinned base. Both builds (smoke + push) get the same BASE_IMAGE / PKG_CACHE build-args. - PKG_CACHE: the package RUN rewrites the AlmaLinux repos (pkg-cache-repos.sh rpm) before microdnf, installs epel-release + remi-release via `release-install epel remi` (signature-checked against keys/pkg-cache/, replacing microdnf epel-release + `dnf install https://...remi-release`), rewrites the new repo files, and restores everything before the RUN ends. Without PKG_CACHE the build uses the upstream repositories as before. - scripts/pkg-cache-repos.sh, .gitea/scripts/resolve-base-image.sh and keys/pkg-cache/ are byte-identical copies from cloud-apache-container. freshclam / SaneSecurity rsync build-time downloads are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
16 lines
839 B
Plaintext
16 lines
839 B
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIICPzCCAeagAwIBAgIUJI0QJZ+PCrSQ/nKZFENwwcp8Zr0wCgYIKoZIzj0EAwIw
|
|
TDEmMCQGA1UEAwwdcGtnLWNhY2hlIGludGVybmFsIENBIChDVDEzMCkxIjAgBgNV
|
|
BAoMGWNsb3VkLWhvc3RpbmcuaW8gaW50ZXJuYWwwHhcNMjYxMDIxMTkzNjIyWhcN
|
|
MzYxMDE4MTkzNjIyWjBMMSYwJAYDVQQDDB1wa2ctY2FjaGUgaW50ZXJuYWwgQ0Eg
|
|
KENUMTMwKTEiMCAGA1UECgwZY2xvdWQtaG9zdGluZy5pbyBpbnRlcm5hbDBZMBMG
|
|
ByqGSM49AgEGCCqGSM49AwEHA0IABBJh75sC5vSzTnkYl0CYYEA/TKUHEXhbtanV
|
|
OVNW4NlD3za5+bu5YuKjpbFAva4TCZqWsaS9IMd/JfsaFbf5XVejgaUwgaIwEgYD
|
|
VR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP7UCTf/
|
|
v7KU1KBrs1vqa71/TZl0MF0GA1UdHgEB/wRTMFGgTzAKhwjAqAEo/////zAlgiNw
|
|
a2ctY2FjaGUuaW50ZXJuYWwuY2xvdWQtaG9zdGluZy5pbzAaghhwa2ctY2FjaGUu
|
|
Z2Vla2hvbWUubG9jYWwwCgYIKoZIzj0EAwIDRwAwRAIgOod4wPHu0kAzYAw8KeGg
|
|
cIrFMwQ4ATKVTkDioiSFOqICIEhY+sGj/YZ4oBMst3b/AAz9zMEJAXpnCkSTI6tM
|
|
YAIl
|
|
-----END CERTIFICATE-----
|