perf: route registry traffic through LAN instead of internet

Use internal registry at 10.10.10.10:5050 instead of git.daddelolymp.de
which routes through Pangolin proxy over internet (40Mbit bottleneck).
All layer cache pulls/pushes and image pushes now stay on LAN.
This commit is contained in:
Claude Code 2026-03-05 17:07:33 +01:00
parent 852bda73f6
commit 8d663f2392

View file

@ -1,61 +1,63 @@
stages: stages:
- build - build
variables: variables:
IMAGE_NAME: "$CI_REGISTRY/$CI_PROJECT_PATH" INTERNAL_REGISTRY: "10.10.10.10:5050"
CI_SERVER_URL: "http://10.10.10.10:9080" IMAGE_NAME: "$INTERNAL_REGISTRY/$CI_PROJECT_PATH"
GITLAB_FEATURES: "" CI_SERVER_URL: "http://10.10.10.10:9080"
GITLAB_FEATURES: ""
docker-build:
stage: build docker-build:
image: stage: build
name: gcr.io/kaniko-project/executor:v1.23.2-debug image:
entrypoint: [""] name: gcr.io/kaniko-project/executor:v1.23.2-debug
rules: entrypoint: [""]
- if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH rules:
before_script: - if: $CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH
- mkdir -p /kaniko/.docker before_script:
- | - mkdir -p /kaniko/.docker
cat > /kaniko/.docker/config.json <<EOF - |
{ cat > /kaniko/.docker/config.json <<EOF
"auths": { {
"$CI_REGISTRY": { "auths": {
"username": "$CI_REGISTRY_USER", "$INTERNAL_REGISTRY": {
"password": "$CI_REGISTRY_PASSWORD" "username": "$CI_REGISTRY_USER",
} "password": "$CI_REGISTRY_PASSWORD"
} }
} }
EOF }
script: EOF
- | script:
if [ "$CI_COMMIT_REF_NAME" = "main" ]; then - |
TAG="main" if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
VERSION="2.0.0" TAG="main"
CHANNEL="stable" VERSION="2.0.0"
elif [ "$CI_COMMIT_REF_NAME" = "feature/nightly" ] || [ "$CI_COMMIT_REF_NAME" = "nightly" ]; then CHANNEL="stable"
TAG="nightly" elif [ "$CI_COMMIT_REF_NAME" = "feature/nightly" ] || [ "$CI_COMMIT_REF_NAME" = "nightly" ]; then
VERSION="2.0.0-nightly" TAG="nightly"
CHANNEL="nightly" VERSION="2.0.0-nightly"
else CHANNEL="nightly"
CLEAN_TAG=$(echo "$CI_COMMIT_REF_NAME" | sed 's/\//-/g') else
TAG="$CLEAN_TAG" CLEAN_TAG=$(echo "$CI_COMMIT_REF_NAME" | sed 's/\//-/g')
VERSION="2.0.0-dev" TAG="$CLEAN_TAG"
CHANNEL="dev" VERSION="2.0.0-dev"
fi CHANNEL="dev"
fi
DESTINATIONS="--destination=$IMAGE_NAME:$CI_COMMIT_SHA --destination=$IMAGE_NAME:$TAG"
if [ "$CI_COMMIT_REF_NAME" = "main" ]; then DESTINATIONS="--destination=$IMAGE_NAME:$CI_COMMIT_SHA --destination=$IMAGE_NAME:$TAG"
DESTINATIONS="$DESTINATIONS --destination=$IMAGE_NAME:latest" if [ "$CI_COMMIT_REF_NAME" = "main" ]; then
fi DESTINATIONS="$DESTINATIONS --destination=$IMAGE_NAME:latest"
fi
echo "Building for channel $CHANNEL with version $VERSION and tag $TAG"
echo "Using registry image: $IMAGE_NAME" echo "Building for channel $CHANNEL with version $VERSION and tag $TAG"
echo "Using registry image: $IMAGE_NAME"
/kaniko/executor \
--context "$CI_PROJECT_DIR" \ /kaniko/executor \
--dockerfile "$CI_PROJECT_DIR/Dockerfile" \ --context "$CI_PROJECT_DIR" \
--build-arg "VITE_BUILD_CHANNEL=$CHANNEL" \ --dockerfile "$CI_PROJECT_DIR/Dockerfile" \
--build-arg "VITE_APP_VERSION=$VERSION" \ --build-arg "VITE_BUILD_CHANNEL=$CHANNEL" \
--cache=true \ --build-arg "VITE_APP_VERSION=$VERSION" \
--cache-repo="$IMAGE_NAME/cache" \ --cache=true \
$DESTINATIONS --cache-repo="$IMAGE_NAME/cache" \
--insecure-registry=$INTERNAL_REGISTRY \
$DESTINATIONS