epistemophiliac/erpnext
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Document and harden registry push against 413 Payload Too Large.

Browse source 
Use ephemeral docker login config; document Cloudflare bypass via Jenkins extra_hosts.
This commit is contained in:
epistemophiliac 2026-06-16 19:57:43 -04:00
parent e1facdec3d
commit ebe9a41501
2 changed files with 21 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
docs/JENKINS.md
View file

@ -62,6 +62,21 @@ The bootstrap stage installs the **buildx** CLI plugin into `.ci-bin/docker-conf
Set `DOCKER_GID` on the Jenkins Coolify service to the host docker group GID (`stat -c '%g' /var/run/docker.sock`), redeploy Jenkins. Set `DOCKER_GID` on the Jenkins Coolify service to the host docker group GID (`stat -c '%g' /var/run/docker.sock`), redeploy Jenkins.
### Registry push `413 Payload Too Large`
Docker image layers are often **>100MB**. If `git.aexoradao.com` is behind **Cloudflare proxy** (orange cloud), uploads fail with `413`.
**Fix (recommended for same-host Jenkins):** Jenkins container `extra_hosts`:
```yaml
extra_hosts:
- 'git.aexoradao.com:host-gateway'
```
Pushes then go to **local Traefik** (Let's Encrypt on origin), not Cloudflare.
**Alternative:** Cloudflare DNS → **DNS only** (grey cloud) for `git.aexoradao.com`, or use Docker Hub as `REGISTRY_IMAGE`.
### Registry push 401/403 ### Registry push 401/403
- Token needs **write:package** (or full repo scope including packages) - Token needs **write:package** (or full repo scope including packages)

6
scripts/ci/jenkins-push-image.sh
View file

@ -14,8 +14,14 @@ if [ -z "${REGISTRY_USER:-}" ] || [ -z "${REGISTRY_PASSWORD:-}" ]; then
exit 1 exit 1
fi fi
# Ephemeral docker config — do not persist registry password in workspace
PUSH_DOCKER_CONFIG="$(mktemp -d)"
trap 'rm -rf "$PUSH_DOCKER_CONFIG"' EXIT
export DOCKER_CONFIG="$PUSH_DOCKER_CONFIG"
echo "$REGISTRY_PASSWORD" | $DOCKER login "$REGISTRY_HOST" -u "$REGISTRY_USER" --password-stdin echo "$REGISTRY_PASSWORD" | $DOCKER login "$REGISTRY_HOST" -u "$REGISTRY_USER" --password-stdin
echo "Pushing ${REGISTRY_IMAGE}:${IMAGE_TAG} (large layers need Cloudflare bypass — Jenkins extra_hosts git.aexoradao.com:host-gateway)"
$DOCKER push "${REGISTRY_IMAGE}:${IMAGE_TAG}" $DOCKER push "${REGISTRY_IMAGE}:${IMAGE_TAG}"
$DOCKER push "${REGISTRY_IMAGE}:main" $DOCKER push "${REGISTRY_IMAGE}:main"