new all workflow

.gitea/workflows/build-ubuntu-latest.yaml

@@ -10,8 +10,8 @@ on:
 
 jobs:
   build:
-    # Bootstraps itself — runs on docker:host (no container spawned)
-    # Docker CLI available via tools volume from initContainer
+    # Runs directly on runner host — buildah+skopeo available via tools volume
+    # No container spawned, no internet required in container
     runs-on: docker
 
     steps:
@@ -36,25 +36,28 @@ jobs:
           echo "tag_sha=${REGISTRY}/${ORG}/${IMAGE}:${SHORT_SHA}" >> $GITHUB_OUTPUT
           echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
 
-      - name: 🐳 Docker Login → Gitea Registry
+      - name: 🔨 Build Image
         run: |
-          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
-            docker login gitea.mod.home \
-              --username "${{ secrets.REGISTRY_USER }}" \
-              --password-stdin
-
-      - name: 🐳 Build Image
-        run: |
-          docker build \
+          buildah bud \
+            --storage-driver vfs \
             -t ${{ steps.tags.outputs.tag_latest }} \
             -t ${{ steps.tags.outputs.tag_sha }} \
             -f docker-ubuntu-latest/Dockerfile \
             docker-ubuntu-latest/
 
-      - name: 🐳 Push Image
+      - name: 📤 Push Image → Gitea Registry
         run: |
-          docker push ${{ steps.tags.outputs.tag_latest }}
-          docker push ${{ steps.tags.outputs.tag_sha }}
+          skopeo copy \
+            --dest-tls-verify=false \
+            --dest-creds "${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}" \
+            containers-storage:${{ steps.tags.outputs.tag_latest }} \
+            docker://${{ steps.tags.outputs.tag_latest }}
+
+          skopeo copy \
+            --dest-tls-verify=false \
+            --dest-creds "${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}" \
+            containers-storage:${{ steps.tags.outputs.tag_sha }} \
+            docker://${{ steps.tags.outputs.tag_sha }}
 
       - name: 📨 Telegram Notification
         if: always()