nanxun/live_recorder
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: bypass docker login, write base64 auth directly to config.json

Browse Source 
Every variant of docker login (--password-stdin, -p) has shown
'Login Succeeded' but docker push consistently gets 401.
Write the base64-encoded user:pass directly into
/root/.docker/config.json, eliminating docker login as a
variable entirely. If push still 401s after this, the problem
is definitively on the Harbor side (robot permissions).

Also fixes broken heredoc escaping from previous commit where
<<'DOCKERCFG' prevented shell variable expansion of AUTH_B64.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
nanxun
2026-07-02 21:33:05 +08:00
co-authored by Claude Opus 4.8
parent 02a0b1bd87
commit e649fb7139
1 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Jenkinsfile
Vendored
+8 -8
View File
@@ -157,11 +157,11 @@ pipeline {
. .
echo "=== Pushing \$PLAT_REF ===" echo "=== Pushing \$PLAT_REF ==="
# Re-login immediately before push — use -p to avoid any # Write Harbor auth directly to config.json (bypass docker
# stdin piping issues with the masked Jenkins variable. # login entirely) — then push with fresh baked-in credentials.
sudo docker login ${REGISTRY_URL} -u "\$DOCKER_USERNAME" -p "\$DOCKER_PASSWORD" 2>&1 | tail -1 AUTH_B64=\$(printf '%s:%s' "\$DOCKER_USERNAME" "\$DOCKER_PASSWORD" | base64 -w0)
echo "DEBUG: auth config after login:" >&2 printf '{"auths":{"%s":{"auth":"%s"}}}' "${REGISTRY_URL}" "\$AUTH_B64" | sudo tee /root/.docker/config.json >/dev/null
sudo cat /root/.docker/config.json 2>/dev/null | head -5 >&2 echo "DEBUG config:" && sudo cat /root/.docker/config.json
sudo docker push "\$PLAT_REF" 2>&1 | tail -5 sudo docker push "\$PLAT_REF" 2>&1 | tail -5
sudo docker push "\$PLAT_LATEST" 2>&1 | tail -5 sudo docker push "\$PLAT_LATEST" 2>&1 | tail -5
@@ -171,7 +171,7 @@ pipeline {
echo '' echo ''
echo "=== Creating multi-arch manifest: ${API_IMAGE_TAGGED} ===" echo "=== Creating multi-arch manifest: ${API_IMAGE_TAGGED} ==="
sudo docker login ${REGISTRY_URL} -u "\$DOCKER_USERNAME" -p "\$DOCKER_PASSWORD" 2>&1 | tail -1 AUTH_B64=\$(printf '%s:%s' "\$DOCKER_USERNAME" "\$DOCKER_PASSWORD" | base64 -w0) && printf '{"auths":{"%s":{"auth":"%s"}}}' "${REGISTRY_URL}" "\$AUTH_B64" | sudo tee /root/.docker/config.json >/dev/null && echo "[config written]"
sudo docker manifest create "${API_IMAGE_TAGGED}" \ sudo docker manifest create "${API_IMAGE_TAGGED}" \
"${API_IMAGE_TAGGED}-amd64" \ "${API_IMAGE_TAGGED}-amd64" \
"${API_IMAGE_TAGGED}-arm64" "${API_IMAGE_TAGGED}-arm64"
@@ -271,7 +271,7 @@ pipeline {
frontend frontend
echo "=== Pushing \$PLAT_REF ===" echo "=== Pushing \$PLAT_REF ==="
sudo docker login ${REGISTRY_URL} -u "\$DOCKER_USERNAME" -p "\$DOCKER_PASSWORD" 2>&1 | tail -1 AUTH_B64=\$(printf '%s:%s' "\$DOCKER_USERNAME" "\$DOCKER_PASSWORD" | base64 -w0) && printf '{"auths":{"%s":{"auth":"%s"}}}' "${REGISTRY_URL}" "\$AUTH_B64" | sudo tee /root/.docker/config.json >/dev/null && echo "[config written]"
sudo docker push "\$PLAT_REF" 2>&1 | tail -3 sudo docker push "\$PLAT_REF" 2>&1 | tail -3
sudo docker push "\$PLAT_LATEST" 2>&1 | tail -3 sudo docker push "\$PLAT_LATEST" 2>&1 | tail -3
sudo docker rmi "\$PLAT_REF" "\$PLAT_LATEST" 2>/dev/null || true sudo docker rmi "\$PLAT_REF" "\$PLAT_LATEST" 2>/dev/null || true
@@ -279,7 +279,7 @@ pipeline {
echo '' echo ''
echo "=== Creating multi-arch manifest: ${WEB_IMAGE_TAGGED} ===" echo "=== Creating multi-arch manifest: ${WEB_IMAGE_TAGGED} ==="
sudo docker login ${REGISTRY_URL} -u "\$DOCKER_USERNAME" -p "\$DOCKER_PASSWORD" 2>&1 | tail -1 AUTH_B64=\$(printf '%s:%s' "\$DOCKER_USERNAME" "\$DOCKER_PASSWORD" | base64 -w0) && printf '{"auths":{"%s":{"auth":"%s"}}}' "${REGISTRY_URL}" "\$AUTH_B64" | sudo tee /root/.docker/config.json >/dev/null && echo "[config written]"
sudo docker manifest create "${WEB_IMAGE_TAGGED}" \ sudo docker manifest create "${WEB_IMAGE_TAGGED}" \
"${WEB_IMAGE_TAGGED}-amd64" \ "${WEB_IMAGE_TAGGED}-amd64" \
"${WEB_IMAGE_TAGGED}-arm64" "${WEB_IMAGE_TAGGED}-arm64"