Skip to content

Stop mirroring self-host Docker releases to the legacy GHCR namespace #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
marcelruhf merged 3 commits into from
Sep 21, 2026
Merged

Stop mirroring self-host Docker releases to the legacy GHCR namespace #1

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
0137253
Publish self-host Docker image to ghcr.io/<owner>/executor
cursoragent Sep 18, 2026
dc639fb
Keep publishing the self-host image as executor-selfhost
cursoragent Sep 18, 2026
3b9ffe5
Revert fork-specific documentation edits
cursoragent Sep 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
54 changes: 0 additions & 54 deletions .github/workflows/publish-selfhost-docker.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,6 @@ jobs:
release_tag: ${{ steps.validate.outputs.tag }}
image: ${{ steps.image.outputs.image }}
tags: ${{ steps.image.outputs.tags }}
legacy_tags: ${{ steps.image.outputs.legacy_tags }}
labels: ${{ steps.image.outputs.labels }}

steps:
Expand Down Expand Up @@ -75,7 +74,6 @@ jobs:
version="${RELEASE_TAG#v}"
owner="$(printf '%s' "$GITHUB_REPOSITORY_OWNER" | tr '[:upper:]' '[:lower:]')"
image="ghcr.io/${owner}/executor-selfhost"
legacy_image="ghcr.io/rhyssullivan/executor-selfhost"
revision="$(git rev-parse HEAD)"

if [[ "$version" == *-* ]]; then
Expand All @@ -93,11 +91,6 @@ jobs:
echo "${image}:${version}"
echo "${image}:${channel}"
echo "TAGS"
echo "legacy_tags<<TAGS"
echo "${legacy_image}:${RELEASE_TAG}"
echo "${legacy_image}:${version}"
echo "${legacy_image}:${channel}"
echo "TAGS"
echo "labels<<LABELS"
echo "org.opencontainers.image.title=Executor self-host"
echo "org.opencontainers.image.description=Single-container self-hosted Executor"
Expand Down Expand Up @@ -338,50 +331,3 @@ jobs:
done <<< "$TAGS"

docker buildx imagetools create "${tag_args[@]}" "${sources[@]}"

# Mirrors each release to the pre-org-move namespace
# (ghcr.io/rhyssullivan/executor-selfhost), which GHCR cannot redirect.
# Deliberately a separate job: the canonical publish above never depends on
# it, and a failure here (an expired GHCR_LEGACY_TOKEN, historically) shows
# as one red job pointing at exactly what to fix.
mirror-legacy:
needs:
- metadata
- merge
runs-on: blacksmith-4vcpu-ubuntu-2404
env:
HAS_LEGACY_TOKEN: ${{ secrets.GHCR_LEGACY_TOKEN != '' }}

steps:
- name: Skip legacy GHCR mirror (GHCR_LEGACY_TOKEN not configured)
if: env.HAS_LEGACY_TOKEN != 'true'
run: echo "GHCR_LEGACY_TOKEN is not configured; skipping legacy GHCR mirror."

- name: Set up Docker Buildx
if: env.HAS_LEGACY_TOKEN == 'true'
uses: docker/setup-buildx-action@v3

- name: Log in to legacy GHCR namespace
if: env.HAS_LEGACY_TOKEN == 'true'
uses: docker/login-action@v3
with:
registry: ghcr.io
username: rhyssullivan
password: ${{ secrets.GHCR_LEGACY_TOKEN }}

- name: Mirror release tags to the legacy namespace
if: env.HAS_LEGACY_TOKEN == 'true'
shell: bash
env:
SOURCE_IMAGE: ${{ needs.metadata.outputs.image }}:${{ needs.metadata.outputs.release_tag }}
LEGACY_TAGS: ${{ needs.metadata.outputs.legacy_tags }}
run: |
set -euo pipefail

tag_args=()
while IFS= read -r tag; do
[[ -n "$tag" ]] || continue
tag_args+=("-t" "$tag")
done <<< "$LEGACY_TAGS"

docker buildx imagetools create "${tag_args[@]}" "$SOURCE_IMAGE"
Loading