Repository navigation
feat: publish the caddy-base image - #2
Merged
Merged
Conversation
Adds the Dockerfile for ghcr.io/caddybuilds/caddy-base: upstream's alpine Dockerfile without the Caddy binary download, pinned to alpine:3.23. Image repos' slim stages copy their custom-built binary onto it. build-base-image.yml builds it for every platform the official caddy image publishes and tags `latest` plus `alpine<pin>`, read from the FROM line. It runs on Dockerfile changes, on demand, and daily at 21:00 UTC, where a check job (check_caddy_status.check_base_image) only lets the build run when library/alpine:<pin> was republished after our last build or our image is missing a platform. Supporting changes in the checker: the Dockerfile reader parses FROM stages with ARG expansion, image references are normalised by image_ref, and GHCR lookups can authenticate with GHCR_TOKEN so a repo can check its own package while it is still private.
This was referenced Oct 26, 2026
Replaces the Python timestamp check with a few lines of shell. Each build pins FROM to the current alpine digest and records it in the org.opencontainers.image.base.digest annotation; the daily run rebuilds when alpine:<pin> now has a different digest. Removes check_base_image, image_ref, the FROM-stage parser, GHCR token auth and their tests.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds the caddy-base image: upstream's alpine Dockerfile without the Caddy binary, on alpine:3.23. Tagged
latestandalpine3.23. Rebuilt daily when alpine:3.23 is republished.Based on #1. The GHCR package needs to be made public after the first build.