From f69a2d4fa22f5db2e502208d89c18f551bd7c328 Mon Sep 17 00:00:00 2001
From: admin <admin@c5ai.ch>
Date: Sat, 25 Apr 2026 22:17:10 +0200
Subject: [PATCH] Debug pipeline

---
 .gitea/workflows/build.yml | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index e3b3209..2efce69 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -73,20 +73,25 @@ jobs:
         run: |
           set -euo pipefail
           
-          # Build the image (docker daemon doesn't need auth for the build)
+          # Build via docker (uses dind via DOCKER_HOST)
           docker build --pull \
             -t "${REGISTRY}/${IMAGE}:${VERSION}" \
-            -t "${REGISTRY}/${IMAGE}:latest" .
+            .
           
-          # Push with skopeo — always sends auth credentials, bypasses
-          # docker's challenge-retry logic that breaks with anonymous /v2/.
-          # skopeo copy reads creds from --src-creds / --dest-creds.
+          # Save image to OCI archive — this exports the layers to a tarball
+          # that skopeo can read directly, bypassing the docker socket
+          docker save "${REGISTRY}/${IMAGE}:${VERSION}" -o /tmp/image.tar
+          
+          # Push with skopeo from the archive
           skopeo copy --dest-creds "$REG_USER:$REG_PASS" \
-            "docker-daemon:${REGISTRY}/${IMAGE}:${VERSION}" \
+            "docker-archive:/tmp/image.tar" \
             "docker://${REGISTRY}/${IMAGE}:${VERSION}"
           
-          skopeo copy --dest-creds "$REG_USER:$REG_PASS" \
-            "docker-daemon:${REGISTRY}/${IMAGE}:latest" \
+          # Tag latest by copying within the registry (no rebuild needed)
+          skopeo copy \
+            --src-creds "$REG_USER:$REG_PASS" \
+            --dest-creds "$REG_USER:$REG_PASS" \
+            "docker://${REGISTRY}/${IMAGE}:${VERSION}" \
             "docker://${REGISTRY}/${IMAGE}:latest"
 
       - name: Tag git commit with version