Skip to content

Fix isolated Docker config for OCIR promotion - #5

Closed
harrisonoconnorhover wants to merge 296 commits into
WagnerJ-Dev:mainfrom
harrisonoconnorhover:codex/oci-isolated-docker-config
Closed

harrisonoconnorhover wants to merge 296 commits into
WagnerJ-Dev:mainfrom
harrisonoconnorhover:codex/oci-isolated-docker-config

Conversation

@harrisonoconnorhover

Copy link
Copy Markdown
Contributor

What changed

  • Keep Buildx discoverable inside the one-use Docker config used for OCIR promotion.
  • Remove Docker Desktop named-context selection from that isolated config because its builder metadata is deliberately not copied.
  • Add focused regression coverage and update the operator handoff.

Why

The live source-free RC5 operator failed closed before registry publication: Docker found no Buildx plugin at first, then selected a named builder whose metadata was absent from the isolated credential directory. The scoped OCI token remained isolated and no OCIR artifact was written.

Impact

No runtime bytes or user-visible execution behavior change. OCI promotion remains a digest-preserving registry copy with a short-lived repository-scoped token.

Checks

  • uv run pytest -q tests/bootstrap/test_oci_image_promotion.py
  • uv run ruff check src/dander/bootstrap/oci_image.py tests/bootstrap/test_oci_image_promotion.py
  • uv run mypy src/dander/bootstrap/oci_image.py
  • git diff --check

harrisonoconnorhover and others added 30 commits August 7, 2026 11:20
…lity-phase1b

Cloud portability Phase 1B: artifact and identity feasibility
…lity-platform-profiles

Cloud portability Phase 2: named platform profiles
…lity-provider-registry

Cloud portability Phase 2: lazy provider factories
…lity-canonical-schema

Cloud portability Phase 2: canonical relation and schema contracts
…lity-sql-dialects

Add explicit portable SQL dialect contract
…lity-graph-ast

Compile pipeline graphs through relational AST
…lity-telemetry

Add provider-neutral run telemetry
…lity-dependencies

Assemble provider runtime dependencies
…lity-bigquery

Route BigQuery through warehouse capabilities
…lity-bigquery-state

Route BigQuery durable state through provider runtime
…lity-dataplex

Route Dataplex through the catalog provider runtime
…lity-gcp-secrets

Route GCP secrets through the provider runtime
…lity-cloud-run

Route Cloud Run through launcher provider
…lity-fargate

Add fail-closed Fargate projection
harrisonoconnorhover and others added 27 commits August 12, 2026 00:55
…uncher

Add OCI Container Instances launcher projection
…fecycle

feat(oci): add lifecycle controller and operations
…tifact-promotion

feat(oci): add digest-preserving OCIR promotion
…ntroller-publication

Publish OCI controller from the reviewed wheel
…igest-addressing

Preserve OCI artifact identity when tag immutability is unavailable
…y-rotation-schedule

fix(oci): schedule automatic key rotation
…epository-metadata

fix(oci): verify exact repository metadata
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
Co-authored-by: Harrison O'Connor-Hoover <harrisonoconnorhover@users.noreply.github.com>
@harrisonoconnorhover

Copy link
Copy Markdown
Contributor Author

Opened against the upstream parent by CLI inference; superseded by the protected-fork PR.

@harrisonoconnorhover
harrisonoconnorhover deleted the codex/oci-isolated-docker-config branch August 12, 2026 13:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant