Publish with a builder on the host's network #9

Merged

jcoffey-dev merged 1 commits from ci/buildx-host-network into main

2026-09-21 23:34:15 +00:00

jcoffey-dev commented

2026-09-21 23:31:19 +00:00

Owner

The v2026.9.20 publish (job 513) built both platforms, then failed to
push:

failed to fetch oauth token: Post "https://git.coffeylabs.org/jwt/auth":
dial tcp 172.30.0.2:443: connect: connection refused

buildx's docker-container builder is a container of its own on the host's
daemon, and it does the push, token and all. On the network it was
created on, git.coffeylabs.org resolves to an internal address with
nothing listening on 443. The job's own docker login worked because it
goes through the host daemon. inbuxa-admin's first release failed the
same way.

The builder now runs on the host's network, so it resolves the name as
the login does. Only the token request goes to git.coffeylabs.org; image
layers still go to registry.coffeylabs.org, the registry's DNS-only name.
It gets a new name, ci-builder-host: ci-builder is a long-lived
container shared between jobs, and create || use would keep reusing it
on its old network.

The v2026.9.20 publish (job 513) built both platforms, then failed to push: failed to fetch oauth token: Post "https://git.coffeylabs.org/jwt/auth": dial tcp 172.30.0.2:443: connect: connection refused buildx's docker-container builder is a container of its own on the host's daemon, and it does the push, token and all. On the network it was created on, git.coffeylabs.org resolves to an internal address with nothing listening on 443. The job's own `docker login` worked because it goes through the host daemon. inbuxa-admin's first release failed the same way. The builder now runs on the host's network, so it resolves the name as the login does. Only the token request goes to git.coffeylabs.org; image layers still go to registry.coffeylabs.org, the registry's DNS-only name. It gets a new name, ci-builder-host: `ci-builder` is a long-lived container shared between jobs, and `create || use` would keep reusing it on its old network.

jcoffey-dev commented

2026-09-21 23:31:19 +00:00

Author

Owner

assigned to @jcoffey-dev

jcoffey-dev scheduled this pull request to auto merge when all checks succeed 2026-09-21 23:33:43 +00:00

jcoffey-dev commented

2026-09-21 23:34:14 +00:00

Author

Owner

mentioned in commit 31ab2284ed

mentioned in commit 31ab2284ed3a7f093d464e8dc9fc84bed067c385