fix(ci): mirror base images as whole multi-arch indexes (T1 of multi-arch image plan) #16

Merged

jknapp merged 1 commits from fix/mirror-base-image-keep-index into main

2026-11-12 00:46:13 +00:00

Author	SHA1	Message	Date
shadowdaoandClaude Sonnet 5.5	905b2894b6	fix(ci): mirror base images as whole multi-arch indexes, with assertions mirror-base-image.yaml pulled the upstream index digest on an amd64 runner and re-pushed it, publishing only the amd64 manifest; the python/golang mirrors had no arm64 variant. Replace pull/tag/push with a registry-to-registry `imagetools create` of the digest-pinned index via .gitea/scripts/ mirror-index-copy.sh: copy to <tag>-staging, assert linux/amd64+linux/arm64 are listed and the index digest equals the Docker Hub digest, then move the real tag and re-assert. A failed assertion never touches the real tag. Adds a local-registry test (.gitea/scripts/test-mirror-index-copy.sh). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0185ukXjXyosSkunDsdWz3mb	2026-11-11 16:40:22 -08:00

Author

SHA1

Message

Date

shadowdaoandClaude Sonnet 5.5

905b2894b6

fix(ci): mirror base images as whole multi-arch indexes, with assertions

mirror-base-image.yaml pulled the upstream index digest on an amd64 runner and
re-pushed it, publishing only the amd64 manifest; the python/golang mirrors
had no arm64 variant. Replace pull/tag/push with a registry-to-registry
`imagetools create` of the digest-pinned index via .gitea/scripts/
mirror-index-copy.sh: copy to <tag>-staging, assert linux/amd64+linux/arm64
are listed and the index digest equals the Docker Hub digest, then move the
real tag and re-assert. A failed assertion never touches the real tag.
Adds a local-registry test (.gitea/scripts/test-mirror-index-copy.sh).

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0185ukXjXyosSkunDsdWz3mb

2026-11-11 16:40:22 -08:00