Build and push server image / build-and-push (push) Successful in 41s
The automatic GITHUB_TOKEN doesn't reliably authenticate against Gitea's Container Registry -- confirmed as a known, still-open limitation across several Gitea versions (multiple upstream issues, consistent with the 401/unauthorized error hit here). Gitea's own community guidance is to use a real Personal Access Token instead. Switches docker/login-action to a REGISTRY_TOKEN repo secret (a PAT with package write scope, created in Gitea's user settings) with an explicit username rather than the gitea.actor context, and drops the now-unused permissions: packages: write block that only applied to the auto token.
35 lines
855 B
YAML
35 lines
855 B
YAML
name: Build and push server image
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
paths:
|
|
- "server/**"
|
|
- ".gitea/workflows/server-docker-build.yml"
|
|
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Log in to Gitea Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: git.thumeit.com
|
|
username: tfaour
|
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
|
|
|
- name: Build and push
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: ./server
|
|
push: true
|
|
tags: |
|
|
git.thumeit.com/tfaour/espresso-frame-server:latest
|
|
git.thumeit.com/tfaour/espresso-frame-server:${{ gitea.sha }}
|