coilyco-flight-deck/galaxy-gen
2
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

push ghcr.io/coilysiren/galaxy-gen/* to Docker Hub as a mirror #7

New issue
Closed
opened 2026-05-26 05:20:15 +00:00 by coilysiren · 1 comment
coilysiren commented 2026-05-26 05:20:15 +00:00
Owner
Copy link

Problem

We currently push the galaxy-gen matrix images to ghcr.io only. Add a parallel docker push to Docker Hub under the same short ref (docker.io/coilysiren/<image>) so the image resolves for pulls without a ghcr login.

Notes

  • Mirror, not source of truth. The load-bearing image registry is the k3s nodes' local pulled-image state on kai-server. ghcr.io stays primary; Docker Hub is a courtesy mirror.
  • Auth: Docker Hub PAT for the coilysiren user lives at /coilysiren/dockerhub/access-token (SSM SecureString). docker login -u coilysiren --password-stdin in CI, never ~/.docker/config.json plaintext.
  • Pattern: add docker.io/coilysiren/<image> alongside the existing ghcr.io/coilysiren/<image> tag in the build-and-publish workflow. Tag and push both refs with the same SHA pin.
  • lunch-money-k8s already does this. Crib from coilysiren/lunch-money-k8s/.github/workflows/docker.yml.

Pre-reqs

  • GitHub Actions secrets DOCKERHUB_USERNAME=coilysiren and DOCKERHUB_TOKEN=<value from SSM> on this repo.
**Problem** We currently push the galaxy-gen matrix images to ghcr.io only. Add a parallel `docker push` to Docker Hub under the same short ref (`docker.io/coilysiren/<image>`) so the image resolves for pulls without a ghcr login. **Notes** - Mirror, not source of truth. The load-bearing image registry is the k3s nodes' local pulled-image state on `kai-server`. ghcr.io stays primary; Docker Hub is a courtesy mirror. - Auth: Docker Hub PAT for the `coilysiren` user lives at `/coilysiren/dockerhub/access-token` (SSM SecureString). `docker login -u coilysiren --password-stdin` in CI, never `~/.docker/config.json` plaintext. - Pattern: add `docker.io/coilysiren/<image>` alongside the existing `ghcr.io/coilysiren/<image>` tag in the build-and-publish workflow. Tag and push both refs with the same SHA pin. - `lunch-money-k8s` already does this. Crib from `coilysiren/lunch-money-k8s/.github/workflows/docker.yml`. **Pre-reqs** - GitHub Actions secrets `DOCKERHUB_USERNAME=coilysiren` and `DOCKERHUB_TOKEN=<value from SSM>` on this repo.
coilysiren commented 2026-05-30 05:43:15 +00:00
Author
Owner
Copy link

Iceboxed in the 2026-05-29 backlog burn-down: Courtesy Docker Hub mirror, explicitly not load-bearing. Reopen anytime if it becomes real.

Iceboxed in the 2026-05-29 backlog burn-down: Courtesy Docker Hub mirror, explicitly not load-bearing. Reopen anytime if it becomes real.
coilysiren 2026-05-30 05:43:16 +00:00
  • closed this issue
  • added the
    P4
         label
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
issue-32
ward-salvage/galaxy-gen-ed9610f6
No results found.
Labels
Clear labels   
burndown-2026-06
Backlog burndown June 2026

  
coherence-core
Core review set for the warded control plane coherence milestone. These issues form the release spine; adjacent milestone issues are stretch or supporting work.

  
consult
A human decision, design, or external action must happen first. Fail-closed default for unlabeled/low-confidence.

  
headless
Agent can take it from open issue to merged change with no human in the loop. The auto-burndown queue.

  
interactive
Agent does the work but pauses at a human checkpoint mid-flight (design choice, destructive step, human-only verification).

  
P0
now / blocking / urgent

  
P1
next / important

  
P2
backlog / will do

  
P3
someday / low

  
P4
icebox / frozen / reopen if it becomes real

No labels
burndown-2026-06
coherence-core
consult
headless
interactive
P0
P1
P2
P3
P4
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
coilyco-flight-deck/galaxy-gen#7
No description provided.