diff options
Diffstat (limited to 'image-builder/build-full-image.sh')
| -rwxr-xr-x | image-builder/build-full-image.sh | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/image-builder/build-full-image.sh b/image-builder/build-full-image.sh index 3706186..6f88db7 100755 --- a/image-builder/build-full-image.sh +++ b/image-builder/build-full-image.sh @@ -200,7 +200,11 @@ LABEL ${DIGEST_LABEL}="${BASE_DIGEST}" CMD ["/bin/bash"] DOCKERFILE - local BUILD_FLAGS=() + # --provenance=false keeps the pushed manifest a plain Docker schema2 + # manifest rather than an OCI image index. The registry's garbage collector + # (distribution 2.8.x) does not follow OCI indexes and, with -m, deletes + # their child manifests; schema2 avoids that. See registry-gc.sh. + local BUILD_FLAGS=(--provenance=false) [[ "${FORCE}" == "true" ]] && BUILD_FLAGS+=(--no-cache) # Explicit exit checks: build_variant runs in an `if ! (...)` condition |