commit 099932d9a491f0c3a06f0afa10bcfac21f3965be
parent a00d26fe8a2ed437fb98ce733ddaf49c009c98e9
Author: MTRNord <MTRNord@users.noreply.github.com>
Date: Thu, 9 Apr 2026 12:57:51 +0200
fixes
Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>
Diffstat:
4 files changed, 36 insertions(+), 29 deletions(-)
diff --git a/apps/talos_cluster/image-builder/build-blog-cronjob.yaml b/apps/talos_cluster/image-builder/build-blog-cronjob.yaml
@@ -40,9 +40,11 @@ spec:
set -eu
apk add --no-cache podman cosign git >/dev/null
- # Start podman daemon
- podman system service unix:///run/podman/podman.sock &>/dev/null &
- sleep 2
+ mkdir -p /etc/containers
+ cat > /etc/containers/storage.conf << 'STORAGE_EOF'
+ [storage]
+ driver = "vfs"
+ STORAGE_EOF
mkdir -p /root/.docker
cp /registry-secret/dockerconfig.json /root/.docker/config.json
diff --git a/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml b/apps/talos_cluster/image-builder/build-bookwyrm-cronjob.yaml
@@ -16,7 +16,6 @@ spec:
serviceAccountName: image-builder-cronjob
restartPolicy: OnFailure
initContainers:
- # Step 1: Check upstream version and whether it already exists in registry.
- name: check-version
image: alpine:3
command:
@@ -49,7 +48,6 @@ spec:
- name: workspace
mountPath: /workspace
- # Step 2: Clone gitops repo to get the dockerfile.patch
- name: clone-gitops
image: alpine/git:latest
command:
@@ -62,7 +60,6 @@ spec:
- name: workspace
mountPath: /workspace
- # Step 3: Clone upstream bookwyrm at the detected version and apply patch.
- name: clone-bookwyrm
image: alpine/git:latest
command:
@@ -107,9 +104,11 @@ spec:
set -eu
apk add --no-cache podman cosign git >/dev/null
- # Start podman daemon
- podman system service unix:///run/podman/podman.sock &>/dev/null &
- sleep 2
+ mkdir -p /etc/containers
+ cat > /etc/containers/storage.conf << 'STORAGE_EOF'
+ [storage]
+ driver = "vfs"
+ STORAGE_EOF
if [ -f /workspace/skip ]; then
echo "Nothing to build — tag already exists in registry"
diff --git a/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml b/apps/talos_cluster/image-builder/build-continuwuity-cronjob.yaml
@@ -16,18 +16,6 @@ spec:
serviceAccountName: image-builder-cronjob
restartPolicy: Never
initContainers:
- - name: setup-cosign
- image: alpine:3
- command:
- - /bin/sh
- - -c
- - |
- wget -qO /tools/cosign https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 \
- && chmod +x /tools/cosign
- volumeMounts:
- - name: tools
- mountPath: /tools
-
- name: clone-repo
image: alpine/git:latest
command:
@@ -40,6 +28,18 @@ spec:
- name: workspace
mountPath: /workspace
+ - name: setup-cosign
+ image: alpine:3
+ command:
+ - /bin/sh
+ - -c
+ - |
+ wget -qO /tools/cosign https://github.com/sigstore/cosign/releases/download/v3.0.6/cosign-linux-amd64 \
+ && chmod +x /tools/cosign
+ volumeMounts:
+ - name: tools
+ mountPath: /tools
+
containers:
- name: build
image: alpine:3
@@ -52,9 +52,11 @@ spec:
set -eu
apk add --no-cache podman cosign git >/dev/null
- # Start podman daemon
- podman system service unix:///run/podman/podman.sock &>/dev/null &
- sleep 2
+ mkdir -p /etc/containers
+ cat > /etc/containers/storage.conf << 'STORAGE_EOF'
+ [storage]
+ driver = "vfs"
+ STORAGE_EOF
mkdir -p /root/.docker
cp /registry-secret/dockerconfig.json /root/.docker/config.json
@@ -96,6 +98,8 @@ spec:
- name: COSIGN_EXPERIMENTAL
value: "1"
volumeMounts:
+ - name: tools
+ mountPath: /tools
- name: workspace
mountPath: /workspace
readOnly: true
@@ -107,10 +111,10 @@ spec:
readOnly: true
volumes:
- - name: workspace
- emptyDir: {}
- name: tools
emptyDir: {}
+ - name: workspace
+ emptyDir: {}
- name: registry-secret
secret:
secretName: image-builder-registry-secret
diff --git a/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml b/apps/talos_cluster/image-builder/build-matrix-backup-cronjob.yaml
@@ -40,9 +40,11 @@ spec:
set -eu
apk add --no-cache podman cosign git >/dev/null
- # Start podman daemon
- podman system service unix:///run/podman/podman.sock &>/dev/null &
- sleep 2
+ mkdir -p /etc/containers
+ cat > /etc/containers/storage.conf << 'STORAGE_EOF'
+ [storage]
+ driver = "vfs"
+ STORAGE_EOF
mkdir -p /root/.docker
cp /registry-secret/dockerconfig.json /root/.docker/config.json
