0 Fork 0

mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 02:54:26 +00:00

Files

T

History

kevinveenbirkenbachandClaude Opus 4.7 43a0592ed5 fix(registry-cache): bypass gcr.io / storage.googleapis.com / googleusercontent.com

The bundled rpardini/docker-registry-proxy 0.6.5 nginx config does not
recognise the GCP Artifact Registry redirect URL shape
(``/artifacts-downloads/namespaces/<ns>/repositories/<repo>/downloads/<token>``)
and replies HTTP 500 to every blob fetch. Local matrix-deploy runs that
include images like ``gcr.io/cadvisor/cadvisor`` therefore fail at
``compose pull`` for the prometheus stack.

Add the three Google-owned blob hosts to ``NO_PROXY`` so the systemd
docker daemon goes direct to upstream for those redirects. The bypass
disables caching for those hosts only; every other registry still flows
through the local cache.

Long-term fix tracked in TODO.md: fork rpardini/docker-registry-proxy
and patch nginx's ``proxy_redirect`` / ``sub_filter`` rules to recognise
the new redirect shape, then drop this bypass.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-08 13:21:21 +02:00

proxy.conf

fix(registry-cache): bypass gcr.io / storage.googleapis.com / googleusercontent.com

2026-05-08 13:21:21 +02:00

README.md

feat(cache): inner-build override + TTL env-var + SPOT docs

2026-04-30 01:08:41 +02:00

README.md

Registry-Cache Wiring 🪞

Static configuration consumed by the registry-cache compose service and bind-mounted into the infinito runner.

For services, activation, coverage, and operations of the local cache stack, see cache.md.

Files 📄

proxy.conf: systemd drop-in for docker.service. Sets HTTP_PROXY/HTTPS_PROXY to the proxy and registers registry-ca.sh as ExecStartPre.