Repository navigation
chore: mirror Docker Hub images behind recent CI rate-limit failures - #37
Merged
Merged
Conversation
Co-Authored-By: Joshua Li <14209781+joshuarli@users.noreply.github.com>
This was referenced Oct 9, 2026
Draft
joshuarli
approved these changes
Oct 9, 2026
joshuarli
added a commit
to getsentry/objectstore
that referenced
this pull request
Oct 9, 2026
`google/cloud-sdk` (implicit `latest`) → `ghcr.io/getsentry/image-mirror-google-cloud-sdk:588.0.0`, which is what `latest` resolves to today. Changed in the Bigtable emulator step in `.github/workflows/ci.yml` and in `devservices/config.yml`. **Why:** `Test (all features)` has been failing on anonymous Docker Hub pulls (`auth.docker.io` timeouts and 429s) from GitHub-hosted runners. **Depends on** getsentry/image-mirror#37 being merged and synced. `588.0.0` is amd64-only upstream, same as before. **Related:** the GCS emulator is built from `getsentry/google-cloud-storage-testbench#main`, whose `FROM python:3.12@sha256:…` is also on Docker Hub. There's a separate draft PR in that repo. <!-- junior-request-attribution:start --> via @joshuarli. <!-- junior-request-attribution:end --> <!-- junior-session-footer:start --> <!-- junior-conversation-id:slack%3ACTJL7358X%3A1791579377.495359 --> -- [View Junior Session](https://junior-prod.sentry.dev/conversations/slack%3ACTJL7358X%3A1791579377.495359) [[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3ACTJL7358X%3A1791579377.495359/?project=4510944073809921) <!-- junior-session-footer:end --> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com> Co-authored-by: Joshua Li <14209781+joshuarli@users.noreply.github.com>
joshuarli
added a commit
to getsentry/sentry
that referenced
this pull request
Oct 9, 2026
Move the Docker Hub pulls that have been failing CI with `429 toomanyrequests` / `auth.docker.io` timeouts onto GHCR mirrors: - `self-hosted/Dockerfile`: `python:3.13.15-slim-trixie` → `ghcr.io/getsentry/image-mirror-library-python:3.13.15-slim-trixie`. - `.github/workflows/self-hosted.yml`: both direct `docker/setup-buildx-action` steps now use `driver-opts: image=ghcr.io/getsentry/image-mirror-moby-buildkit:v0.33.1` instead of pulling `moby/buildkit:buildx-stable-1`. - `.github/workflows/openapi-diff.yml`: replace `oasdiff/oasdiff-action/breaking`, which builds `FROM tufin/oasdiff:main` on Docker Hub, with a `docker run` of `ghcr.io/getsentry/image-mirror-tufin-oasdiff:v1.33.0 breaking … --fail-on WARN --format githubactions`. `main` is an untagged dev build, so this pins to the latest release. **Depends on** getsentry/image-mirror#37 being merged and synced. Until then, the touched jobs will fail to pull. **Not included:** the `tonistiigi/binfmt` pull inside `getsentry/action-build-and-push-images`. That's fixed in that action, and this repo will need a SHA bump once it merges. <!-- junior-request-attribution:start --> via @joshuarli. <!-- junior-request-attribution:end --> <!-- junior-session-footer:start --> <!-- junior-conversation-id:slack%3ACTJL7358X%3A1791579377.495359 --> -- [View Junior Session](https://junior-prod.sentry.dev/conversations/slack%3ACTJL7358X%3A1791579377.495359) [[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3ACTJL7358X%3A1791579377.495359/?project=4510944073809921) <!-- junior-session-footer:end --> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com> Co-authored-by: Joshua Li <14209781+joshuarli@users.noreply.github.com>
joshuarli
added a commit
to getsentry/uptime-checker
that referenced
this pull request
Oct 9, 2026
`Dockerfile`: `alpine:3.22.1` → `ghcr.io/getsentry/image-mirror-library-alpine:3.22.1`. **Why:** `build-multiplatform-image-ghcr-arm64` has been failing on anonymous Docker Hub pulls (`429 toomanyrequests`) from GitHub-hosted runners. **Depends on** getsentry/image-mirror#37 being merged and synced. **Not included:** the `tonistiigi/binfmt` pull inside `getsentry/action-build-and-push-images`. That's fixed in that action, and this repo will need a SHA bump once it merges. <!-- junior-request-attribution:start --> via @joshuarli. <!-- junior-request-attribution:end --> <!-- junior-session-footer:start --> <!-- junior-conversation-id:slack%3ACTJL7358X%3A1791579377.495359 --> -- [View Junior Session](https://junior-prod.sentry.dev/conversations/slack%3ACTJL7358X%3A1791579377.495359) [[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3ACTJL7358X%3A1791579377.495359/?project=4510944073809921) <!-- junior-session-footer:end --> Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com> Co-authored-by: Joshua Li <14209781+joshuarli@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Mirror the Docker Hub images that broke getsentry CI over the past hour with
429 toomanyrequests,auth.docker.iotimeouts/504s, or registry 500s. Floating tags are pinned to the patch tag they resolve to today, so consumers can reference an immutable tag.tonistiigi/binfmtqemu-v10.2.3-68latestaction-build-and-push-images(QEMU setup)moby/buildkitv0.33.1buildx-stable-1action-build-and-push-images, sentryself-hosted.yml(buildx)library/python3.13.15-slim-trixietufin/oasdiffv1.33.0main(untagged dev build; pinned to latest release)openapi-diff.ymlnvidia/cuda12.8.0-base-ubuntu24.04pgvector/pgvector0.8.7-pg14-bookwormpg14library/redis7.4.11-alpine7-alpinelibrary/alpine3.16.2library/rust1.96.1-bookworm1.96-bookwormlibrary/node22.23.3-alpine22-alpinelibrary/debian12.15-slim12-slimlibrary/python3.14.4-slim-bookwormlibrary/python3.12.9-bookworm3.12@sha256:9e615ab…(linux digests from that pin)google/cloud-sdk588.0.0latestlibrary/ubuntunoble-2026091724.04library/alpine3.22.1library/postgres15.1915confluentinc/cp-kafka7.9.0altinity/clickhouse-server22.8.15.25.altinitystableAll entries are amd64 + arm64, except
google/cloud-sdk:588.0.0, which is amd64-only upstream.Notes
_digests()helper.python3 -uSm main sync --dry-runlists every new entry aswould sync.IMAGESblock was rendered sorted the same waymain updatedoes. That moves the existingclickhouse/clickhouse-server:26.8.1.2041andcheckr/flagr:latestentries, but doesn't change them.library/python:3.12.9-bookwormuses the linux amd64/arm64 digests from the testbench's pinned index. The upstream3.12index also has Windows manifests, which the mirror skips.image-mirror-*packages.Consumer draft PRs that switch to these mirrors are linked from the originating Slack thread.
via @joshuarli.
--
View Junior Session [Sentry]