admin/dyolink
0
0
Fork 0
Code Issues 24 Pull Requests 1 Actions Packages Projects 1 Releases Wiki Activity

fix: pull node:20-alpine from Arvan/ECR when Docker Hub is blocked

Browse Source
This commit is contained in:
rameen
2026-09-05 19:59:45 +03:30
parent 005e0b0394
commit 8fa856a980
4 changed files with 63 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
infrastructure/STAGING-DEPLOY.md
View File

@@ -300,7 +300,7 @@ On the Windows host, from repo `infrastructure/`:
| Runner can't register on public IP | Use `http://127.0.0.1:3000` for `--instance` |
| Variable name rejected in Gitea | No `GITEA_*` / `GITHUB_*` prefixes; use `CLONE_HOST` |
| `413 Request Entity Too Large` on `docker push` to `https://gitea.wixur.ir/v2/…/blobs/uploads` | Nginx (or Cloudflare) in front of Gitea is rejecting the image layer. **Fix the proxy** (then `nginx -s reload`): in the `server { server_name gitea.wixur.ir; }` block set `client_max_body_size 0;` and `proxy_request_buffering off;` — snippet: [`nginx/windows-gitea.wixur.snippet.conf`](nginx/windows-gitea.wixur.snippet.conf). **Or skip the proxy:** set `REGISTRY_HOST=host.docker.internal:3000` (and Gitea `ROOT_URL`) so CI pushes to `:3000`. If the hostname is orange-clouded on Cloudflare, grey-cloud it (free plan caps uploads at 100MB). |
| `TLS handshake timeout` to `registry-1.docker.io` / `node:20-alpine` | Docker Hub unreachable from the Windows runner. CI mirrors `node:20-alpine` into Gitea (`<REGISTRY_PREFIX>/node:20-alpine`) and builds from that. If Hub is down **and** the image is not on the machine: on the runner run `docker pull node:20-alpine` when Hub works, then re-run the workflow. Optional Docker Engine `registry-mirrors`. |
| `TLS handshake timeout` to `registry-1.docker.io` / `node:20-alpine` | Docker Hub is blocked or slow from the Windows runner. CI pulls `node:20-alpine` from **Arvan / ECR Public / GCR**, then pushes `<REGISTRY_PREFIX>/node:20-alpine` to Gitea (later builds skip Hub). Optional variable `NODE_IMAGE_SOURCE` (comma-separated image refs). One-time on the runner: `docker pull docker.arvancloud.ir/library/node:20-alpine` then tag/push to Gitea. |
| `docker login` connection refused on `127.0.0.1:3000` | **Docker Desktop on Windows:** set `REGISTRY_HOST=host.docker.internal:3000`, add it to insecure-registries, set Gitea `ROOT_URL=http://host.docker.internal:3000/`. Keep `CLONE_HOST=127.0.0.1:3000` for git. |
| `docker login` / push denied, redirect to public IP | Set Gitea `ROOT_URL` to a host Docker can reach (`host.docker.internal:3000` on Windows Docker Desktop). |
| `server gave HTTP response to HTTPS client` | Add registry host to Docker **insecure-registries**, restart Docker |

76
infrastructure/scripts/ci-resolve-node-image.ps1
View File

@@ -1,10 +1,11 @@
# Prefer a Gitea-hosted node:20-alpine so docker build does not HEAD registry-1.docker.io.
# Order: local Gitea tag -> pull Gitea -> local Docker Hub tag -> pull Hub (retries) -> tag/push Gitea.
# Order: Gitea -> optional NODE_IMAGE_SOURCE -> regional/official mirrors -> Docker Hub last.
# ASCII only: Windows PowerShell 5.1 + act_runner mis-parses backtick escapes in this file.
param(
[Parameter(Mandatory = $true)][string]$RegistryPrefix,
[string]$OutFile = '.ci-node-image',
[string]$HubImage = 'node:20-alpine'
[string]$HubImage = 'node:20-alpine',
[string]$ExtraSources = ''
)
$ErrorActionPreference = 'Continue'
@@ -21,7 +22,7 @@ function Invoke-Pull([string]$Name, [int]$Attempts) {
Write-Host "docker pull $Name (attempt $i/$Attempts)"
docker pull $Name
if ($LASTEXITCODE -eq 0) { return $true }
if ($i -lt $Attempts) { Start-Sleep -Seconds (10 * $i) }
if ($i -lt $Attempts) { Start-Sleep -Seconds 5 }
}
return $false
}
@@ -33,39 +34,66 @@ function Save-Choice([string]$Name) {
Write-Host "NODE_IMAGE=$Name"
}
function Publish-Mirror([string]$Src) {
Write-Host "Tagging $Src as $mirror"
docker tag $Src $mirror
if ($LASTEXITCODE -ne 0) { return $false }
docker push $mirror
if ($LASTEXITCODE -ne 0) {
Write-Host "Could not push $mirror - docker build will use the local tag (legacy builder)."
$flag = Join-Path (Get-Location) '.ci-use-legacy-builder'
New-Item -ItemType File -Path $flag -Force | Out-Null
}
Save-Choice $mirror
return $true
}
if (Test-Image $mirror) {
Write-Host "Using local $mirror"
Save-Choice $mirror
exit 0
}
if (Invoke-Pull $mirror 2) {
if (Invoke-Pull $mirror 1) {
Save-Choice $mirror
exit 0
}
if (-not (Test-Image $HubImage)) {
if (-not (Invoke-Pull $HubImage 5)) {
Write-Host "Cannot pull $HubImage from Docker Hub (TLS timeout or blocked)."
Write-Host "On the Windows runner, when Hub is reachable:"
Write-Host " docker pull $HubImage"
Write-Host " docker tag $HubImage $mirror"
Write-Host " docker push $mirror"
Write-Host "Then re-run this workflow."
exit 1
$sources = New-Object System.Collections.ArrayList
if (-not [string]::IsNullOrWhiteSpace($ExtraSources)) {
foreach ($part in ($ExtraSources -split ',')) {
$src = $part.Trim()
if ($src.Length -gt 0) { [void]$sources.Add($src) }
}
}
# Iran-reachable proxy of Docker Hub official images, then public official mirrors, Hub last.
foreach ($src in @(
'docker.arvancloud.ir/library/node:20-alpine',
'public.ecr.aws/docker/library/node:20-alpine',
'mirror.gcr.io/library/node:20-alpine',
$HubImage
)) {
if (-not $sources.Contains($src)) { [void]$sources.Add($src) }
}
foreach ($src in $sources) {
if (Test-Image $src) {
Write-Host "Found local $src"
if (Publish-Mirror $src) { exit 0 }
}
}
Write-Host "Tagging $HubImage as $mirror"
docker tag $HubImage $mirror
if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
docker push $mirror
if ($LASTEXITCODE -ne 0) {
Write-Host "Could not push $mirror - docker build will use the local tag (legacy builder)."
$flag = Join-Path (Get-Location) '.ci-use-legacy-builder'
New-Item -ItemType File -Path $flag -Force | Out-Null
foreach ($src in $sources) {
if (Invoke-Pull $src 2) {
if (Publish-Mirror $src) { exit 0 }
}
}
Save-Choice $mirror
exit 0
Write-Host "Could not pull node:20-alpine from Gitea, mirrors, or Docker Hub."
Write-Host "Set repository variable NODE_IMAGE_SOURCE to a reachable image, for example:"
Write-Host " docker.arvancloud.ir/library/node:20-alpine"
Write-Host "Or on the Windows runner:"
Write-Host " docker pull docker.arvancloud.ir/library/node:20-alpine"
Write-Host " docker tag docker.arvancloud.ir/library/node:20-alpine $mirror"
Write-Host " docker push $mirror"
exit 1