Showing the changes to .github (1 of 1 file). Show all
Unified · Split
| @@ -281,9 +281,6 @@ jobs: · 280 unmodified lines | ||
| 281 | 281 | runs-on: blacksmith-4vcpu-ubuntu-2404 |
| 282 | 282 | permissions: |
| 283 | 283 | packages: write |
| 284 | − env: | |
| 285 | − HAS_LEGACY_TOKEN: ${{ secrets.GHCR_LEGACY_TOKEN != '' }} | |
| 286 | − | |
| 287 | 284 | steps: |
| 288 | 285 | - name: Download image digests |
| 289 | 286 | uses: actions/download-artifact@v4 |
| @@ -330,10 +327,28 @@ jobs: · 40 unmodified lines | ||
| 330 | 327 | |
| 331 | 328 | docker buildx imagetools create "${tag_args[@]}" "${sources[@]}" |
| 332 | 329 | |
| 330 | + # Mirrors each release to the pre-org-move namespace | |
| 331 | + # (ghcr.io/rhyssullivan/executor-selfhost), which GHCR cannot redirect. | |
| 332 | + # Deliberately a separate job: the canonical publish above never depends on | |
| 333 | + # it, and a failure here (an expired GHCR_LEGACY_TOKEN, historically) shows | |
| 334 | + # as one red job pointing at exactly what to fix. | |
| 335 | + mirror-legacy: | |
| 336 | + needs: | |
| 337 | + - metadata | |
| 338 | + - merge | |
| 339 | + runs-on: blacksmith-4vcpu-ubuntu-2404 | |
| 340 | + env: | |
| 341 | + HAS_LEGACY_TOKEN: ${{ secrets.GHCR_LEGACY_TOKEN != '' }} | |
| 342 | + | |
| 343 | + steps: | |
| 333 | 344 | - name: Skip legacy GHCR mirror (GHCR_LEGACY_TOKEN not configured) |
| 334 | 345 | if: env.HAS_LEGACY_TOKEN != 'true' |
| 335 | 346 | run: echo "GHCR_LEGACY_TOKEN is not configured; skipping legacy GHCR mirror." |
| 336 | 347 | |
| 348 | + - name: Set up Docker Buildx | |
| 349 | + if: env.HAS_LEGACY_TOKEN == 'true' | |
| 350 | + uses: docker/setup-buildx-action@v3 | |
| 351 | + | |
| 337 | 352 | - name: Log in to legacy GHCR namespace |
| 338 | 353 | if: env.HAS_LEGACY_TOKEN == 'true' |
| 339 | 354 | uses: docker/login-action@v3 |
| @@ -342,7 +357,7 @@ jobs: · 2 unmodified lines | ||
| 342 | 357 | username: rhyssullivan |
| 343 | 358 | password: ${{ secrets.GHCR_LEGACY_TOKEN }} |
| 344 | 359 | |
| 345 | − - name: Mirror self-host image to legacy GHCR namespace | |
| 360 | + - name: Mirror release tags to the legacy namespace | |
| 346 | 361 | if: env.HAS_LEGACY_TOKEN == 'true' |
| 347 | 362 | shell: bash |
| 348 | 363 | env: |