..

.forgejo/actions/push_container/action.yml

@@ -8,6 +8,10 @@ description: Push the `source` image to the `destination` registry
 # Parameters
 #=======================================================================
 inputs:
+  registry:
+    required: true
+    description: The registry to authen
+
   source:
     required: true
     description: The source image to be pushed
@@ -26,3 +30,9 @@ runs:
       run: |
         echo "Authenticate"
         echo "pushing image '${{ inputs.source }}' to '${{ inputs.destination }}'"
+
+        echo "${{ forge.token }}" | podman login --username '${{ forge.actor }}' --password-stdin
+
+    - name: Push
+      run: |
+        podman push '${{ inputs.source }}' '${{ inputs.destination }}'

.forgejo/workflows/build.yml

@@ -36,29 +36,26 @@ jobs:
           nix-build src/default.nix
           podman load < result
           
-      - uses: ./.forgejo/actions/push_container
+      - name: Log into registry
-        with:
+        run: |
-          source: ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}
+          podman login \
-          destination: ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}
+          --log-level=debug \
+          --authfile ~/.config/containers/auth.json \
+          --username "${{ forge.actor }}" \
+          --password "${{ forge.token }}" \
+          ${{ env.registry }}
 
-      # - name: Log into registry
+          curl --fail -u${{ forge.actor }}:${{ forge.token }} -sS ${{ env.registry }}/v2/token | jq --raw-output '"Authorization: token \(.token)"'
-      #   run: >-
-      #     podman login
-      #     --log-level=debug
-      #     --authfile ~/.config/containers/auth.json
-      #     --username "${{ forge.actor }}"
-      #     --password "${{ forge.token }}"
-      #     ${{ env.registry }}
 
-      # - name: __DEBUG__
+      - name: __DEBUG__
-      #   run: |
+        run: |
-      #     echo "~/.config/containers/auth.json"
+          echo "~/.config/containers/auth.json"
-      #     [ -f ~/.config/containers/auth.json ] && cat ~/.config/containers/auth.json || echo "file doesn't exist"
+          [ -f ~/.config/containers/auth.json ] && cat ~/.config/containers/auth.json || echo "file doesn't exist"
 
-      # - name: Push image
+      - name: Push image
-      #   run: >-
+        run: >-
-      #     podman push
+          podman push
-      #     --log-level=debug
+          --log-level=debug
-      #     --authfile ~/.config/containers/auth.json
+          --authfile ~/.config/containers/auth.json
-      #     localhost/default:latest
+          localhost/default:latest
-      #     ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}
+          ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }}

src/default.nix

@@ -5,7 +5,7 @@
 
 with pkgs;
 dockerTools.buildImage {
-  name = "git.amarth.cloud/default";
+  name = "default";
   tag = "latest";
 
   copyToRoot = buildEnv {