fix(ci): wrap GitLab dind TLS env in docker context so buildx accepts it

The build-backend and build-frontend jobs were failing immediately after identity verification finally allocated runners: $ docker buildx create --use --name multiarch --driver docker-container ERROR: could not create a builder instance with TLS data loaded from environment. Please use `docker context create <context-name>` to create a context for current environment and then create a builder instance with context set to <context-name> The dind service exports DOCKER_HOST=tcp://docker:2376 + DOCKER_TLS_CERTDIR=/certs, but buildx --driver docker-container doesn't read TLS from those env vars directly. Documented GitLab fix: create an empty `docker context` (which inherits the current TLS env), then bind buildx to that context name as a positional arg. After this lands, the multi-arch buildx jobs should actually build and push amd64 + arm64 images to registry.gitlab.com/bigbodycobain/shadowbroker/backend:latest registry.gitlab.com/bigbodycobain/shadowbroker/frontend:latest Surfaced by the post-verification pipeline at https://gitlab.com/bigbodycobain/Shadowbroker/-/pipelines/2550501798 Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
chore(ci): bump comment in .gitlab-ci.yml to verify post-verification runner allocation (#329 )
2026-06-06 22:33:59 +02:00 · 2026-05-25 01:57:02 -06:00 · 2026-05-25 01:54:08 -06:00
1 changed files with 9 additions and 1 deletions
@@ -13,6 +13,10 @@
 #   2. Reverse-mirrors main back to GitHub (only if commits land directly
 #      on GitLab) so the two sources stay in sync.
 #
+# Pipelines on this repo were instant-failing for free-tier accounts until
+# identity verification was added — the May 2026 bump in this comment is
+# the marker commit that confirms runner allocation after verification.
+#
 # Auth notes:
 #   - The image build/push uses $CI_JOB_TOKEN, which GitLab provides
 #     automatically. No credentials need to be configured.
@@ -48,7 +52,11 @@ variables:
    - docker info
    - docker login -u "$CI_REGISTRY_USER" -p "$CI_JOB_TOKEN" "$CI_REGISTRY"
    - docker run --privileged --rm tonistiigi/binfmt --install all
-    - docker buildx create --use --name multiarch --driver docker-container
+    # buildx --driver docker-container can't read TLS from the env vars
+    # the GitLab dind service exports. Wrap them in a docker context and
+    # bind buildx to it. See https://docs.gitlab.com/ee/ci/docker/using_docker_build.html#use-docker-buildx
+    - docker context create tls-env
+    - docker buildx create --use --name multiarch --driver docker-container tls-env

 # ── Backend image ────────────────────────────────────────────────────────
 build-backend: