joshbairstow/jb-website
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(ci): isolate DOCKER_CONFIG so login skips the host pass credstore
All checks were successful
deploy / build-and-deploy (push) Successful in 24s
Details

Browse source 
The desktop runner's ~/.docker/config.json uses credsStore: pass, which isn't
initialised, so docker login failed to store creds. Use a throwaway
DOCKER_CONFIG under RUNNER_TEMP (outside the build context) for the job.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Josh Bairstow 2026-06-02 23:53:18 +10:00
parent 085e0bb3b6
commit b643c0be3e
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
.forgejo/workflows/deploy.yml
View file

@ -41,6 +41,12 @@ jobs:
- name: Log in to the Forgejo registry - name: Log in to the Forgejo registry
run: | run: |
# Isolate Docker's config in a throwaway dir (outside the build context)
# so login doesn't use the desktop's credential helper (credsStore: pass,
# uninitialised on the runner). Exported so build/push see it too.
export DOCKER_CONFIG="${RUNNER_TEMP}/docker"
echo "DOCKER_CONFIG=${DOCKER_CONFIG}" >> "$GITHUB_ENV"
mkdir -p "${DOCKER_CONFIG}"
echo "${{ secrets.REGISTRY_TOKEN }}" \ echo "${{ secrets.REGISTRY_TOKEN }}" \
| docker login "${REGISTRY}" -u "${{ secrets.REGISTRY_USER }}" --password-stdin | docker login "${REGISTRY}" -u "${{ secrets.REGISTRY_USER }}" --password-stdin