This commit is contained in:
@@ -7,8 +7,13 @@ steps:
|
|||||||
- name: build-and-push
|
- name: build-and-push
|
||||||
# Pinned: WOODPECKER_PLUGINS_PRIVILEGED on the server must allow this exact
|
# Pinned: WOODPECKER_PLUGINS_PRIVILEGED on the server must allow this exact
|
||||||
# image:tag, so a floating tag here would silently break the build.
|
# image:tag, so a floating tag here would silently break the build.
|
||||||
|
#
|
||||||
|
# Deliberately NO `privileged: true` here -- that flag requires repo-level
|
||||||
|
# "security" trust and is rejected without it. The server-side allowlist
|
||||||
|
# escalates this step instead, but only while it stays a *plugin*: adding
|
||||||
|
# `commands`, `entrypoint`, or `environment` to this step silently drops
|
||||||
|
# the escalation and buildx's inner daemon will fail to start.
|
||||||
image: woodpeckerci/plugin-docker-buildx:6.1.1
|
image: woodpeckerci/plugin-docker-buildx:6.1.1
|
||||||
privileged: true
|
|
||||||
settings:
|
settings:
|
||||||
registry: registry.apps.millslan.net
|
registry: registry.apps.millslan.net
|
||||||
repo: registry.apps.millslan.net/starship/coreid
|
repo: registry.apps.millslan.net/starship/coreid
|
||||||
|
|||||||
Reference in New Issue
Block a user