From 8bfbfe3b5bb7fd62fd1ce579bc5bcc31d507a200 Mon Sep 17 00:00:00 2001 From: Konstantin Renner Date: Fri, 1 May 2026 07:48:07 +0200 Subject: [PATCH] ci(rebuild-k8s): swap recreate-vms to prebuilt ci-tofu image MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The recreate-vms step still pulled ghcr.io/opentofu/opentofu:1.11 and ran `apk add --no-cache git openssh-client curl` on every run — the only step in this pipeline that hadn't been migrated to a prebuilt ci-* image. Each invocation was an apk roundtrip plus a GHCR pull, and the resulting tool versions were whatever Alpine edge happened to ship that day. Swap to gitea.renner.uno/gitea_admin/ci-tofu:2026-04-29, which already bakes git, openssh-client, curl, and tofu 1.11.0. The inline `apk add` line goes away; everything else in the step keeps working unchanged. Co-Authored-By: Claude Opus 4.7 (1M context) --- .woodpecker/rebuild-k8s.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.woodpecker/rebuild-k8s.yml b/.woodpecker/rebuild-k8s.yml index 43893dbb..0d7250f8 100644 --- a/.woodpecker/rebuild-k8s.yml +++ b/.woodpecker/rebuild-k8s.yml @@ -4,7 +4,7 @@ when: steps: - name: recreate-vms - image: ghcr.io/opentofu/opentofu:1.11 + image: gitea.renner.uno/gitea_admin/ci-tofu:2026-04-29 directory: opentofu environment: TF_IN_AUTOMATION: "true" @@ -32,7 +32,6 @@ steps: SSH_PRIVATE_KEY: from_secret: ssh_private_key commands: - - apk add --no-cache git openssh-client curl - mkdir -p ~/.ssh - echo "$SSH_PRIVATE_KEY" | base64 -d > ~/.ssh/id_ed25519 - chmod 600 ~/.ssh/id_ed25519