9176399f50
- Enabled GitLab Container Registry on its own subdomain via NPM/mkcert - Built minimal ssh-alpine image (Alpine + OpenSSH, key-only auth) - Docker-outside-of-Docker build pipeline reusing the host socket, no DinD - Forced --pull --no-cache builds so scheduled rebuilds pick up real upstream updates - Biweekly Pipeline Schedule (cron: 0 3 */14 * *) - Registry cleanup policy to prevent unbounded tag growth - Documented the Tailscale/Pi-hole DNS conflict and other gotchas hit along the way
25 lines
915 B
YAML
25 lines
915 B
YAML
stages:
|
|
- build
|
|
|
|
.build-image:
|
|
stage: build
|
|
image: docker:27-cli
|
|
services: [] # not needed — we're using the host socket, not DinD
|
|
before_script:
|
|
- docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" "$CI_REGISTRY"
|
|
script:
|
|
- docker pull alpine:3.20
|
|
- docker build --pull --no-cache -t "$CI_REGISTRY_IMAGE/$IMAGE_NAME:latest" -t "$CI_REGISTRY_IMAGE/$IMAGE_NAME:$CI_COMMIT_SHORT_SHA" "images/$IMAGE_NAME"
|
|
- docker push "$CI_REGISTRY_IMAGE/$IMAGE_NAME:latest"
|
|
- docker push "$CI_REGISTRY_IMAGE/$IMAGE_NAME:$CI_COMMIT_SHORT_SHA"
|
|
|
|
build-ssh-alpine:
|
|
extends: .build-image
|
|
variables:
|
|
IMAGE_NAME: ssh-alpine
|
|
|
|
# Scheduled biweekly via GitLab's native Pipeline Schedules (Build > Pipeline
|
|
# schedules), cron pattern: 0 3 */14 * *
|
|
# Runs on both the schedule and regular pushes — no `rules` restriction —
|
|
# so editing a Dockerfile also triggers an immediate rebuild.
|