Mirror coilysiren/coilysiren into Forgejo (out-of-band, unblocks uniform-Forgejo container preclone) #352

New issue

Open

opened 2026-06-17 06:49:52 +00:00 by coilysiren · 0 comments

coilysiren commented

2026-06-17 06:49:52 +00:00

Owner

Why

The ward container preclone substrate list (ward/cmd/ward/containerassets/preclone-repos.txt) assumes every entry is reachable via the same Forgejo token the container already configures. Eight of the nine repos are Forgejo-canonical. The ninth, coilysiren/coilysiren, is GitHub-only.

A GitHub-only entry forces the container to either inject GitHub creds (widening its auth surface past Forgejo) or hit GitHub's anonymous rate limit (60 req/hr, shared across all containers on the egress IP). Either is a per-container tax.

What

Stand up a Forgejo mirror of coilysiren/coilysiren so the preclone list is uniformly Forgejo and the container keeps its Forgejo-token-only auth posture. This is deliberately out of band from the preclone-list work - that list already assumes the mirror exists.

Done when

coilysiren/coilysiren resolves on forgejo.coilysiren.me (pull mirror or push mirror, operator's call).
The container can clone it with the existing /forgejo/api-token creds, no GitHub access.

Refs

Preclone list: coilyco-flight-deck/ward/cmd/ward/containerassets/preclone-repos.txt
Ansible local-sync counterpart: infrastructure/scripts/clone-coilysiren-repos.sh

## Why The ward container preclone substrate list (`ward/cmd/ward/containerassets/preclone-repos.txt`) assumes every entry is reachable via the same Forgejo token the container already configures. Eight of the nine repos are Forgejo-canonical. The ninth, `coilysiren/coilysiren`, is GitHub-only. A GitHub-only entry forces the container to either inject GitHub creds (widening its auth surface past Forgejo) or hit GitHub's anonymous rate limit (60 req/hr, shared across all containers on the egress IP). Either is a per-container tax. ## What Stand up a Forgejo mirror of `coilysiren/coilysiren` so the preclone list is uniformly Forgejo and the container keeps its Forgejo-token-only auth posture. This is deliberately out of band from the preclone-list work - that list already assumes the mirror exists. ## Done when - `coilysiren/coilysiren` resolves on `forgejo.coilysiren.me` (pull mirror or push mirror, operator's call). - The container can clone it with the existing `/forgejo/api-token` creds, no GitHub access. ## Refs - Preclone list: `coilyco-flight-deck/ward/cmd/ward/containerassets/preclone-repos.txt` - Ansible local-sync counterpart: `infrastructure/scripts/clone-coilysiren-repos.sh`

coilysiren referenced this issue from a commit

2026-06-17 07:30:39 +00:00

feat(scripts): converge local substrate sync on ward's shared repo list

coilysiren referenced this issue from a commit

2026-06-17 07:50:09 +00:00

feat(scripts): converge local substrate sync on ward's shared repo list

coilysiren added the

label

2026-06-17 09:23:33 +00:00

coilysiren added the

consult

label