DEVX-137: fix: use legacy Docker builder to avoid Gitea registry 403

2026-07-14 00:54:12 +00:00
parent 83ea4496e5
commit 2cfc0aca10
1 changed files with 4 additions and 1 deletions
@@ -162,7 +162,7 @@ def build_image(
        return False

    full_tags = [build_full_tag(registry, spec.name, t) for t in spec.tags]
-    cmd = ["docker", "build", "--provenance=false"]
+    cmd = ["docker", "build"]
    if pull:
        cmd.append("--pull")
    for ft in full_tags:
@@ -174,9 +174,12 @@ def build_image(
        return True

    click.echo(f"Building {spec.name} ({len(full_tags)} tag(s))...")
+    # Use legacy builder (DOCKER_BUILDKIT=0) to avoid OCI-format manifest
+    # blobs (attestation, config) that the Gitea registry rejects with 403.
    result = subprocess.run(  # nosec B603
        cmd,
        check=False,
+        env={**os.environ, "DOCKER_BUILDKIT": "0"},
    )
    if result.returncode != 0:
        click.echo(_("Build failed for {name}", name=spec.name), err=True)