kert
|
a463d278dc
|
fix apk mirroring: enumerate installed packages from Alpine images, upload to Gitea
CI / lint-test (push) Successful in 1m19s
CI / lint-test (pull_request) Successful in 1m30s
Infra CI / zotero (pull_request) Successful in 6s
Infra CI / docs (pull_request) Successful in 6s
Infra CI / api (pull_request) Successful in 7s
Infra CI / mc (pull_request) Successful in 6s
Infra CI / notebooks (pull_request) Successful in 2m48s
closes #161
- Scan nginx:alpine for all 72 installed packages via `apk info`
- Fetch each package individually (handles custom repos gracefully)
- 67 .apk files uploaded to Gitea Alpine registry (v3.23/main)
- 5 nginx modules from custom repos skipped (baked into base image)
|
2026-03-24 00:44:19 -04:00 |
|
kert
|
66932516a9
|
replace devpi/apt-cacher-ng with Gitea package registry
Infra CI / notebooks (push) Failing after 47s
Infra CI / zotero (push) Successful in 6s
Infra CI / docs (push) Successful in 5s
Infra CI / mc (push) Successful in 6s
Infra CI / zotero (pull_request) Successful in 7s
Infra CI / api (pull_request) Successful in 5s
Infra CI / api (push) Successful in 29s
CI / lint-test (push) Successful in 1m33s
Infra CI / notebooks (pull_request) Failing after 36s
Infra CI / docs (pull_request) Successful in 6s
Infra CI / mc (pull_request) Successful in 6s
CI / lint-test (pull_request) Successful in 1m29s
Package Supply Chain / pkg-supply-chain (push) Failing after 52s
closes #160, closes #161, closes #162, closes #163, refs #164
- Remove apt-cacher-ng and devpi containers from compose.yml
- pkg_mirror_sync.py: downloads from upstream, uploads to Gitea's
built-in PyPI and Debian registries via API
- Dockerfiles: add PYPI_INDEX_URL build-arg for local registry
- CI build steps pass --build-arg PYPI_INDEX_URL for mirror builds
- stack.toml: add [mirrors] section pointing at Gitea endpoints
- Add packages.homelab.fhirworx.io subdomain (traefik + coredns)
- Verified: 39 PyPI wheels + 146 Debian .debs uploaded to Gitea
|
2026-03-24 00:31:07 -04:00 |
|
kert
|
b184e72f7b
|
add package mirrors, auto-issue scripts, network isolation test, CI workflow
CI / lint-test (pull_request) Successful in 1m22s
CI / lint-test (push) Successful in 1m26s
refs #160 #161 #162 #163 #164 #166 #167 #168
- compose.yml: add apt-cacher-ng and devpi services on ci network
- pkg_mirror_sync.py: generates seed files for apt/apk/pypi mirrors
- pkg_issues.py: auto-creates Gitea issues for drift and CVEs,
deduplicates, auto-closes resolved issues
- test_network_isolation.sh: builds all Dockerfiles with --network=none
- gitea.py: add pkg-supply-chain workflow (daily + on Dockerfile/dep changes)
- mirrors/: seed files for apt (5 pkgs), apk (index), pypi (39 pkgs)
|
2026-03-24 00:02:31 -04:00 |
|
kert
|
fddb3cce55
|
add package supply chain scaffold: inventory scanner, drift detector, pipeline spec
CI / lint-test (push) Successful in 1m16s
CI / lint-test (pull_request) Successful in 1m16s
refs #159 #165 #168
- pkg_inventory.py: scans all Dockerfiles, pyproject.toml, CI workflows
for apt/apk/pypi/npm packages and emits data/pkg-manifest.json
- pkg_drift.py: compares manifest against fresh scan to detect phantom
or untracked packages
- pkg-supply-chain.yml: CI-agnostic pipeline definition covering
inventory → mirror-sync → drift-check → vuln-scan → auto-issues
|
2026-03-23 23:57:06 -04:00 |
|