shadowdaoandClaude Opus 5.5
6eed6aa615
CI resolves httpd:alpine to httpd@sha256:<digest> directly at registry-1.docker.io (.gitea/scripts/resolve-base-image.sh) and passes it as BASE_IMAGE. Only when the base is digest-pinned AND the pkg-cache registry mirror (192.168.1.40:5000) answers over TLS with the pinned CA is the buildx builder configured with the mirror; otherwise Docker Hub direct as before. The image installs no OS packages, so no PKG_CACHE build-arg / pkg-cache-repos.sh is needed; keys/pkg-cache/ is carried for the CA (identical copy of cloud-apache-container's). Local builds without build-args still use httpd:alpine. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
16 lines
839 B
Plaintext
16 lines
839 B
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIICPzCCAeagAwIBAgIUJI0QJZ+PCrSQ/nKZFENwwcp8Zr0wCgYIKoZIzj0EAwIw
|
|
TDEmMCQGA1UEAwwdcGtnLWNhY2hlIGludGVybmFsIENBIChDVDEzMCkxIjAgBgNV
|
|
BAoMGWNsb3VkLWhvc3RpbmcuaW8gaW50ZXJuYWwwHhcNMjYxMDIxMTkzNjIyWhcN
|
|
MzYxMDE4MTkzNjIyWjBMMSYwJAYDVQQDDB1wa2ctY2FjaGUgaW50ZXJuYWwgQ0Eg
|
|
KENUMTMwKTEiMCAGA1UECgwZY2xvdWQtaG9zdGluZy5pbyBpbnRlcm5hbDBZMBMG
|
|
ByqGSM49AgEGCCqGSM49AwEHA0IABBJh75sC5vSzTnkYl0CYYEA/TKUHEXhbtanV
|
|
OVNW4NlD3za5+bu5YuKjpbFAva4TCZqWsaS9IMd/JfsaFbf5XVejgaUwgaIwEgYD
|
|
VR0TAQH/BAgwBgEB/wIBADAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFP7UCTf/
|
|
v7KU1KBrs1vqa71/TZl0MF0GA1UdHgEB/wRTMFGgTzAKhwjAqAEo/////zAlgiNw
|
|
a2ctY2FjaGUuaW50ZXJuYWwuY2xvdWQtaG9zdGluZy5pbzAaghhwa2ctY2FjaGUu
|
|
Z2Vla2hvbWUubG9jYWwwCgYIKoZIzj0EAwIDRwAwRAIgOod4wPHu0kAzYAw8KeGg
|
|
cIrFMwQ4ATKVTkDioiSFOqICIEhY+sGj/YZ4oBMst3b/AAz9zMEJAXpnCkSTI6tM
|
|
YAIl
|
|
-----END CERTIFICATE-----
|