ci: route the Eco image build through the runner egress proxy #142

New issue

Closed

opened 2026-07-22 07:14:02 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-07-22 07:14:02 +00:00

Member

Context

The container-native mod packaging path fails before publishing because dotnet restore cannot reliably fetch the public NuGet v3 service index from the Forgejo runner DinD network. infrastructure#563 now owns an allowlisted in-cluster egress proxy and exposes its address to runner jobs as FORGEJO_EGRESS_PROXY.

Work

Opt the application image build into the shared proxy through Docker predefined proxy build arguments. Keep the proxy value out of the Dockerfile and final image. Route the frontend, mod, and Python dependency hosts needed by this multi-stage build through the infrastructure allowlist.

Acceptance

Local workflow validation and the full repository gate pass.
The Docker build receives HTTP_PROXY and HTTPS_PROXY from FORGEJO_EGRESS_PROXY.
No proxy address is persisted in the application image.
After infrastructure#563 is live-verified, the application image builds and all four independent mod publishers complete.

## Context The container-native mod packaging path fails before publishing because `dotnet restore` cannot reliably fetch the public NuGet v3 service index from the Forgejo runner DinD network. infrastructure#563 now owns an allowlisted in-cluster egress proxy and exposes its address to runner jobs as `FORGEJO_EGRESS_PROXY`. ## Work Opt the application image build into the shared proxy through Docker predefined proxy build arguments. Keep the proxy value out of the Dockerfile and final image. Route the frontend, mod, and Python dependency hosts needed by this multi-stage build through the infrastructure allowlist. ## Acceptance * Local workflow validation and the full repository gate pass. * The Docker build receives `HTTP_PROXY` and `HTTPS_PROXY` from `FORGEJO_EGRESS_PROXY`. * No proxy address is persisted in the application image. * After infrastructure#563 is live-verified, the application image builds and all four independent mod publishers complete. Related: #111, #141, coilyco-flight-deck/infrastructure#563.

coilyco-ops referenced this issue from a commit

2026-07-22 07:32:38 +00:00

ci: route image builds through runner egress proxy

coilyco-ops closed this issue

2026-07-22 07:32:38 +00:00

coilyco-ops referenced this issue from coilyco-flight-deck/infrastructure

2026-07-28 22:25:33 +00:00

Restore repository-scoped image publishers after runner migration #675