diff options
| author | Danilo M. <danix@danix.xyz> | 2026-09-10 21:02:49 +0200 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-09-10 21:02:49 +0200 |
| commit | cd4f992a29da96b835c14545a0cb05e7e87ca291 (patch) | |
| tree | 278578f0fd672269e3af8b8368143930b5081675 /image-builder/config | |
| parent | f8c45fc28964a69d51fe41f967c9fe0734b68a72 (diff) | |
| download | sbo-dockerbuild-master.tar.gz sbo-dockerbuild-master.zip | |
The registry never reclaims blobs, so its store grows until the disk fills and the nightly builds fail with "no space left on device". Add registry-gc.sh, run weekly (Sunday 08:00), plus a daily dangling-image prune.
registry-gc.sh refuses to run while a build is active, stops the registry for a stable blob graph, deletes only untagged manifests (-m) and their blobs, restarts via an EXIT trap, and verifies a tag still pulls.
distribution 2.8.x GC does not follow OCI image indexes, so -m deletes their child manifests (distribution#3178). Default BuildKit provenance made every pushed tag an OCI index, which made -m destructive. Build scripts now pass --provenance=false (plain schema2), and registry-gc.sh refuses to run if any tag is still an index.
Diffstat (limited to 'image-builder/config')
| -rw-r--r-- | image-builder/config | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/image-builder/config b/image-builder/config index 8b52313..3815cb9 100644 --- a/image-builder/config +++ b/image-builder/config @@ -2,6 +2,7 @@ # Sourced by bootstrap.sh, build-full-image.sh, build-sbo-testbuild.sh, tests. REGISTRY="docker.noland.dnx:5000" +REGISTRY_CONTAINER="registry" # container running the LAN registry (registry-gc.sh) MIRROR="file:///mnt/nas" VARIANTS=(current 15.0) # x86_64 only for now PKGDIR="/opt/sbo-testbuild/pkgs" # sbopkg + sbo-maintainer-tools .txz |