mirror of
https://github.com/TecharoHQ/anubis.git
synced 2025-11-29 17:10:22 +08:00
b5ead0a68c* fix(data): add ruleset to explicitly allow Docker / OCI clients Fixes #1252 This is technically a regression as these clients used to work in Anubis v1.22.0, however it is allowable to make this opt-in as most websites do not expect to be serving Docker / OCI registry client traffic. Signed-off-by: Xe Iaso <me@xeiaso.net> * Update metadata check-spelling run (pull_request) for Xe/gh-1252/docker-registry-client-fix Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com> on-behalf-of: @check-spelling <check-spelling-bot@check-spelling.dev> * test(docker-registry): export the right envvars Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: add simdjson dependency for homebrew node Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: install go/node without homebrew Signed-off-by: Xe Iaso <me@xeiaso.net> * test: use right github commit variable Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: remove simdjson dependency Signed-off-by: Xe Iaso <me@xeiaso.net> * ci: install ko with an action Signed-off-by: Xe Iaso <me@xeiaso.net> * docs: add OCI registry caveat docs Signed-off-by: Xe Iaso <me@xeiaso.net> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Signed-off-by: check-spelling-bot <check-spelling-bot@users.noreply.github.com>
29 lines
444 B
Bash
Executable file
29 lines
444 B
Bash
Executable file
#!/usr/bin/env bash
|
|
|
|
set -eo pipefail
|
|
|
|
export VERSION=${GITHUB_SHA}-test
|
|
export KO_DOCKER_REPO=ko.local
|
|
|
|
set -u
|
|
|
|
source ../lib/lib.sh
|
|
|
|
build_anubis_ko
|
|
|
|
function cleanup() {
|
|
docker compose down
|
|
}
|
|
|
|
trap cleanup EXIT SIGINT
|
|
|
|
mint_cert registry.local.cetacean.club
|
|
|
|
docker compose up -d
|
|
|
|
backoff-retry skopeo \
|
|
--insecure-policy \
|
|
copy \
|
|
--dest-tls-verify=false \
|
|
docker://hello-world \
|
|
docker://registry.local.cetacean.club:3004/hello-world
|