From 284898dc2fbed46cdd9bc1ee8cc08cde2e5af1e2 Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Sun, 29 Mar 2026 12:19:52 -0500
Subject: [PATCH] prod docker change (#222)

Reviewed-on: https://git.mcintire.me/graham/towerops-web/pulls/222
---
 .forgejo/workflows/production.yaml | 16 ++++++++++------
 1 file changed, 10 insertions(+), 6 deletions(-)

diff --git a/.forgejo/workflows/production.yaml b/.forgejo/workflows/production.yaml
index 39596ce5..ff054f20 100644
--- a/.forgejo/workflows/production.yaml
+++ b/.forgejo/workflows/production.yaml
@@ -83,9 +83,6 @@ jobs:
     name: Build and Push Docker Image
     runs-on: ubuntu-22.04
     needs: [test-exunit]
-    container:
-      image: gcr.io/kaniko-project/executor:debug
-      options: --entrypoint=""
     outputs:
       image_tag: ${{ steps.tag.outputs.tag }}
 
@@ -103,19 +100,26 @@ jobs:
           echo "tag=${TAG}" >> $GITHUB_OUTPUT
           echo "Full image tag: ${TAG}"
 
+      - name: Install Kaniko
+        run: |
+          curl -fsSL https://github.com/GoogleContainerTools/kaniko/releases/latest/download/executor-linux-amd64 \
+            -o /usr/local/bin/kaniko
+          chmod +x /usr/local/bin/kaniko
+
       - name: Build and push with Kaniko
         run: |
           IMAGE_TAG="${{ steps.tag.outputs.tag }}"
           REGISTRY_AUTH=$(echo -n "${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}" | base64 -w 0)
 
-          mkdir -p /kaniko/.docker
+          mkdir -p /tmp/kaniko-docker
           echo "{\"auths\":{\"${{ secrets.REGISTRY_URL }}\":{\"auth\":\"${REGISTRY_AUTH}\"}}}" \
-            > /kaniko/.docker/config.json
+            > /tmp/kaniko-docker/config.json
 
-          /kaniko/executor \
+          /usr/local/bin/kaniko \
             --context="${GITHUB_WORKSPACE}" \
             --dockerfile="${GITHUB_WORKSPACE}/k8s/Dockerfile" \
             --build-arg="MIX_ENV=prod" \
+            --docker-config=/tmp/kaniko-docker \
             --destination="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${IMAGE_TAG}" \
             --destination="${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:production"