From 5852c3e3f2d8bf75d1fa64cc559fc0d6acccc082 Mon Sep 17 00:00:00 2001 From: JP Hastings-Spital Date: Sun, 31 May 2026 10:16:44 +0200 Subject: [PATCH] Fix skopeo push: use --insecure-policy The Nix environment ships no /etc/containers/policy.json, so skopeo aborted with "Error loading trust policy". --insecure-policy selects skopeo's built-in accept-anything policy (equivalent to the default policy.json on most distros). --- .tangled/workflows/release.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.tangled/workflows/release.yml b/.tangled/workflows/release.yml index c0621e9..2ea310f 100644 --- a/.tangled/workflows/release.yml +++ b/.tangled/workflows/release.yml @@ -47,7 +47,9 @@ steps: tag="${TANGLED_REF_NAME}" # the pushed tag, e.g. v1.2.3 creds="${ATCR_HANDLE}:${ATCR_APP_PASSWORD}" - skopeo copy --dest-creds "$creds" \ + # --insecure-policy selects skopeo's built-in accept-anything signature + # policy; the Nix environment ships no /etc/containers/policy.json. + skopeo --insecure-policy copy --dest-creds "$creds" \ "docker-archive:$(readlink -f result)" "docker://${image}:${tag}" - skopeo copy --dest-creds "$creds" \ + skopeo --insecure-policy copy --dest-creds "$creds" \ "docker-archive:$(readlink -f result)" "docker://${image}:latest" -- 2.51.2