Publish tool images in the tool-images registry namespace #79

Merged

gitchegumi merged 1 commit from kiyi/tool-image-registry into main

2026-10-06 20:23:19 -05:00

kiyi commented

2026-10-06 18:37:10 -05:00

Member

Tool images currently receive the same homelab/base-<folder> naming as OS/runtime bases. Route validated image_root: tools selections to REGISTRY_HOST/homelab/tool-images/<folder> and tool-<folder>-vYYYY.MM.DD-r<run> release names. Existing images/ callers keep their names and defaults. This supports the shared tools/main-runner image in base-images PR30 and issue28 without creating a new source repository.

The target CLI checks the selected definition and safe selectors before emitting Actions outputs. The existing build, scan, signed receipt and digest verification consume the exact destination. Registry packages remain Homelab-owned and retain truthful source labels linking their owning repository. Existing publications and evidence remain immutable.

Validation: 36 relevant base-image, container, Forgejo-contract and release tests passed; eight existing symlink subcases were skipped because Windows cannot create those fixture links. All 18 workflow YAML files and 58 Bash steps passed syntax checks; pinned Ruff/PEP257, Python compilation and diff checks passed. The nested destination is verified against mocked image scans and receipt generation without executing Docker. Commit e43a334 has kiyi author/committer.

After review/merge, publish v1.30.0 through this repository’s protected release Action. Base-images PR30 keeps candidate scanning on published v1.29.0 while its manual publication caller prepares the v1.30.0 namespace contract. Operator publication remains pending this release; no container or production deployment was performed.

Tool images currently receive the same `homelab/base-<folder>` naming as OS/runtime bases. Route validated `image_root: tools` selections to `REGISTRY_HOST/homelab/tool-images/<folder>` and `tool-<folder>-vYYYY.MM.DD-r<run>` release names. Existing `images/` callers keep their names and defaults. This supports the shared `tools/main-runner` image in [base-images PR30](https://git.gitchegumi.com/Homelab/base-images/pulls/30) and [issue28](https://git.gitchegumi.com/Homelab/base-images/issues/28) without creating a new source repository. The target CLI checks the selected definition and safe selectors before emitting Actions outputs. The existing build, scan, signed receipt and digest verification consume the exact destination. Registry packages remain Homelab-owned and retain truthful source labels linking their owning repository. Existing publications and evidence remain immutable. Validation: 36 relevant base-image, container, Forgejo-contract and release tests passed; eight existing symlink subcases were skipped because Windows cannot create those fixture links. All 18 workflow YAML files and 58 Bash steps passed syntax checks; pinned Ruff/PEP257, Python compilation and diff checks passed. The nested destination is verified against mocked image scans and receipt generation without executing Docker. Commit e43a334 has kiyi author/committer. After review/merge, publish v1.30.0 through this repository’s protected release Action. Base-images PR30 keeps candidate scanning on published v1.29.0 while its manual publication caller prepares the v1.30.0 namespace contract. Operator publication remains pending this release; no container or production deployment was performed.

kiyi added 1 commit

2026-10-06 18:37:10 -05:00

Separate workflow tool images into their registry namespace

Workflow acceptance / acceptance (pull_request) Successful in 2m45s

Details

Repository security / security-1 (pull_request) Successful in 3m24s

Details

Library checks / tests (pull_request) Successful in 4m38s

Details

e43a3342e8

kiyi referenced this pull request from Homelab/Documentation

2026-10-06 18:38:04 -05:00