From e6068d93e0b1df6dcc8975e8657e626c33645407 Mon Sep 17 00:00:00 2001
From: nanxun <nanxun@nxsir.cn>
Date: Wed, 12 Aug 2026 00:01:50 +0800
Subject: [PATCH] ci: harden registry proxy credentials

---
 Jenkinsfile | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/Jenkinsfile b/Jenkinsfile
index a9f748f..24e0616 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -201,7 +201,10 @@ pipeline {
                           --driver-opt network=host \
                           --driver-opt "env.http_proxy=$HTTP_PROXY_URL" \
                           --driver-opt "env.https_proxy=$HTTP_PROXY_URL" \
+                          --driver-opt "env.HTTP_PROXY=$HTTP_PROXY_URL" \
+                          --driver-opt "env.HTTPS_PROXY=$HTTP_PROXY_URL" \
                           --driver-opt "env.no_proxy=reg.nxsir.cn" \
+                          --driver-opt "env.NO_PROXY=reg.nxsir.cn" \
                           --use
                         ./scripts/ci-docker.sh buildx inspect "$BUILDER_NAME" --bootstrap
                     '''
@@ -218,9 +221,12 @@ pipeline {
                 )]) {
                     sh '''
                         set -euo pipefail
+                        set +x
                         auth=$(printf '%s:%s' "$HARBOR_USERNAME" "$HARBOR_PASSWORD" | base64 -w0)
                         printf '{"auths":{"%s":{"auth":"%s"}}}\n' "$REGISTRY_URL" "$auth" >"$DOCKER_CONFIG/config.json"
                         chmod 600 "$DOCKER_CONFIG/config.json"
+                        unset auth
+                        set -x
                     '''
                 }
             }