Merge pull request '在 VM Runner 中构建发布镜像' (#17) from refactor/publish-on-vm into main

Reviewed-on: #17

.gitea/workflows/publish-images.yml

@@ -17,7 +17,7 @@ on:
 jobs:
   publish-images:
     name: publish-images
-    runs-on: [self-hosted, pod]
+    runs-on: [self-hosted, vm]
     timeout-minutes: 45
     permissions:
       contents: read
@@ -41,29 +41,6 @@ jobs:
           apt-get install --yes --no-install-recommends shellcheck
           shellcheck scripts/*
 
-      - name: Start Docker
-        shell: bash
-        run: |
-          set -euo pipefail
-          # The runner Pod itself uses an overlay filesystem. A nested overlay
-          # snapshotter cannot mount there, so use the copy-based vfs driver.
-          dockerd \
-            --storage-driver=vfs \
-            --feature containerd-snapshotter=false \
-            >/tmp/dockerd.log 2>&1 &
-          for _ in $(seq 1 60); do
-            if docker info >/dev/null 2>&1; then
-              exit 0
-            fi
-            if ! kill -0 "$!" 2>/dev/null; then
-              cat /tmp/dockerd.log >&2
-              exit 1
-            fi
-            sleep 1
-          done
-          cat /tmp/dockerd.log >&2
-          exit 1
-
       - name: Build and publish
         shell: bash
         run: |
@@ -75,6 +52,7 @@ jobs:
           docker_config=$(mktemp -d)
           jwt_file=$(mktemp)
           cleanup() {
+            docker buildx rm ci-builder >/dev/null 2>&1 || true
             rm -rf -- "$docker_config" "$jwt_file"
           }
           trap cleanup EXIT
@@ -88,12 +66,17 @@ jobs:
           jq -er '.[0].svids[0].svid' "$jwt_file" | \
             docker login "$PUSH_REGISTRY" --username zot --password-stdin
 
+          docker buildx create \
+            --name ci-builder \
+            --driver docker-container \
+            --use
+
           publish() {
             local repository=$1
             local dockerfile=$2
             local metadata=$3
             docker buildx build \
-              --builder default \
+              --builder ci-builder \
               --platform linux/amd64 \
               --file "$dockerfile" \
               --tag "${PUSH_REGISTRY}/${repository}:${image_tag}" \