@tahminator/pipeline 1.0.92-beta.gba48c7d3 → 1.0.93

package/README.md

@@ -333,6 +333,8 @@ The diff is split per Kubernetes object (matched by API group, kind, namespace a
 
 Interface with Docker to build & deploy images
 
+`buildImage` runs BuildKit on the runner's network with `--network host`, so every `RUN` instruction can reach whatever the runner can, including hosts on the Headscale VPN connected by the setup action. Dockerfiles don't need `RUN --network=host`.
+
 ```ts
 // https://www.typescriptlang.org/docs/handbook/release-notes/typescript-5-2.html#using-declarations-and-explicit-resource-management
 await using client = await DockerClient.create(

package/dist/docker/client.js

@@ -48,7 +48,10 @@ export class DockerClient {
         console.log("Building image with following tags:");
         tags.forEach((tag) => console.log(Utils.Colors.cyan(tag)));
         try {
-            await $ `docker buildx create --use --name ${dockerRepository}-builder`;
+            await $ `docker buildx create --use --name ${dockerRepository}-builder \
+                --driver docker-container \
+                --driver-opt network=host \
+                --buildkitd-flags ${"--allow-insecure-entitlement network.host"}`;
         }
         catch {
             await $ `docker buildx use ${dockerRepository}-builder`;
@@ -68,6 +71,8 @@ export class DockerClient {
               --cache-from=type=gha \
               --cache-to=type=gha,mode=max \
               ${buildArgFlags} \
+              --network host \
+              --allow network.host \
               ${tagFlags} \
               .`;
         console.log(shouldUpload ?

package/package.json

@@ -3,7 +3,7 @@
   "type": "module",
   "author": "Tahmid Ahmed",
   "description": "A collection of Bun shell scripts that can be re-used in various CICD pipelines.",
-  "version": "1.0.92-beta.gba48c7d3",
+  "version": "1.0.93",
   "repository": {
     "url": "git+https://github.com/tahminator/pipeline.git"
   },