claude-memory/graph/solutions/gitea-actions-docker-buildx-registry-cache-auth-fix-856511.md
Cal Corum 34bb613c57 Add 20 retroactive edges and sync pending memory updates
- 20 new high-quality edges across 8 project clusters
- Edge types: BUILDS_ON, RELATED_TO, ALTERNATIVE_TO, REQUIRES
- Updated relation metadata on connected memories
- New episode entries and memory files from recent sessions

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-19 23:34:07 -06:00

26 lines
1.3 KiB
Markdown

---
id: 856511bd-a987-48cf-9dfe-ee069f32beea
type: solution
title: "Gitea Actions: Docker buildx registry cache auth fix"
tags: [gitea, docker, ci-cd, fix, buildx, cache]
importance: 0.7
confidence: 0.8
created: "2026-02-13T20:38:30.950917+00:00"
updated: "2026-02-20T04:32:04.248740+00:00"
relations:
- target: 77cf0fb1-9a58-43d2-b1d2-6532bafa6204
type: BUILDS_ON
direction: incoming
strength: 0.9
edge_id: cd4fb377-d051-457b-8521-89aa39496ec7
---
When using Docker buildx with registry-based cache (cache-from/cache-to type=registry), the Docker Hub login step must run on ALL builds, not just main branch. Without login, PR builds fail on second run with 'push access denied, repository does not exist or may require authorization' when trying to write cache layers.
Fix: Remove the 'if: github.ref == refs/heads/main' condition from the Docker Hub login step. The push flag on build-push-action still gates actual image publishing to main-only, so this is safe.
Template location: server-configs/gitea/workflow-templates/docker-build-template.yml
Affected repos: major-domo-bot, major-domo-database, paper-dynasty, paper-dynasty-database
The error manifests on the SECOND build because the first build creates cache layers successfully (fresh write), but subsequent builds fail when trying to overwrite existing layers without auth.