push ghcr.io/coilysiren/eco-spec-tracker/coilysiren-eco-spec-tracker to Docker Hub as a mirror #30

New issue

Closed

opened 2026-06-17 07:29:48 +00:00 by coilysiren · 1 comment

coilysiren commented

2026-06-17 07:29:48 +00:00

Owner

Problem

We currently push the coilysiren-eco-spec-tracker image (workflow still uses the pre-rename path) to ghcr.io only. Add a parallel docker push to Docker Hub under the same short ref (docker.io/coilysiren/<image>) so the image resolves for pulls without a ghcr login.

Notes

Mirror, not source of truth. The load-bearing image registry is the k3s nodes' local pulled-image state on kai-server. ghcr.io stays primary; Docker Hub is a courtesy mirror.
Auth: Docker Hub PAT for the coilysiren user lives at /coilysiren/dockerhub/access-token (SSM SecureString). docker login -u coilysiren --password-stdin in CI, never ~/.docker/config.json plaintext.
Pattern: add docker.io/coilysiren/<image> alongside the existing ghcr.io/coilysiren/<image> tag in the build-and-publish workflow. Tag and push both refs with the same SHA pin.
lunch-money-k8s already does this. Crib from coilysiren/lunch-money-k8s/.github/workflows/docker.yml.

Pre-reqs

GitHub Actions secrets DOCKERHUB_USERNAME=coilysiren and DOCKERHUB_TOKEN=<value from SSM> on this repo.

Migrated from coilyco-flight-deck/eco-jobs-tracker#9 during the eco repo consolidation (coilysiren/inbox#100).

**Problem** We currently push the coilysiren-eco-spec-tracker image (workflow still uses the pre-rename path) to ghcr.io only. Add a parallel `docker push` to Docker Hub under the same short ref (`docker.io/coilysiren/<image>`) so the image resolves for pulls without a ghcr login. **Notes** - Mirror, not source of truth. The load-bearing image registry is the k3s nodes' local pulled-image state on `kai-server`. ghcr.io stays primary; Docker Hub is a courtesy mirror. - Auth: Docker Hub PAT for the `coilysiren` user lives at `/coilysiren/dockerhub/access-token` (SSM SecureString). `docker login -u coilysiren --password-stdin` in CI, never `~/.docker/config.json` plaintext. - Pattern: add `docker.io/coilysiren/<image>` alongside the existing `ghcr.io/coilysiren/<image>` tag in the build-and-publish workflow. Tag and push both refs with the same SHA pin. - `lunch-money-k8s` already does this. Crib from `coilysiren/lunch-money-k8s/.github/workflows/docker.yml`. **Pre-reqs** - GitHub Actions secrets `DOCKERHUB_USERNAME=coilysiren` and `DOCKERHUB_TOKEN=<value from SSM>` on this repo. --- _Migrated from coilyco-flight-deck/eco-jobs-tracker#9 during the eco repo consolidation (coilysiren/inbox#100)._

coilysiren added the

label

2026-06-17 07:29:49 +00:00

coilysiren commented

2026-06-17 08:20:38 +00:00

Author

Owner

Backlog burndown 2026-06-17: closing low-priority (P3/P4) to bring the open count to a manageable level. Nothing lost — reopen if this resurfaces. Batch tag: burndown-2026-06.

Backlog burndown 2026-06-17: closing low-priority (P3/P4) to bring the open count to a manageable level. Nothing lost — reopen if this resurfaces. Batch tag: `burndown-2026-06`.

coilysiren

2026-06-17 08:20:38 +00:00