diff options
Diffstat (limited to 'image-builder/bootstrap.sh')
| -rwxr-xr-x | image-builder/bootstrap.sh | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/image-builder/bootstrap.sh b/image-builder/bootstrap.sh index 7316116..e632e7a 100755 --- a/image-builder/bootstrap.sh +++ b/image-builder/bootstrap.sh @@ -541,7 +541,11 @@ DOCKERFILE # (see Main), which suppresses `set -e` in this subshell, so a failed build # would otherwise push a nonexistent tag and log "Done". _log "Building and pushing ${TAG}..." - if ! docker build --no-cache -t "${TAG}" "${WORKDIR}"; then + # --provenance=false keeps the pushed manifest a plain Docker schema2 + # manifest rather than an OCI image index. The registry's garbage collector + # (distribution 2.8.x) does not follow OCI indexes and, with -m, deletes + # their child manifests; schema2 avoids that. See registry-gc.sh. + if ! docker build --provenance=false --no-cache -t "${TAG}" "${WORKDIR}"; then _warn "build failed for ${TAG}; not pushing." return 1 fi |