From 2d37b35d1f1f38437820747b0961758364a60f4a Mon Sep 17 00:00:00 2001
From: 0xWheatyz <wyatt@leeworks.dev>
Date: Fri, 6 Mar 2026 02:50:06 +0000
Subject: [PATCH] feat: switch to Kaniko for faster container builds
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- Replace Docker CLI with Kaniko executor for Kubernetes compatibility
- Combine build and push into single Kaniko step
- Remove Docker daemon dependency for better performance in containerized runners
- Reduce setup time with lighter dependencies (~14MB vs ~50MB+)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .gitea/workflows/build.yaml | 49 ++++++++++++++++++++++---------------
 1 file changed, 29 insertions(+), 20 deletions(-)

diff --git a/.gitea/workflows/build.yaml b/.gitea/workflows/build.yaml
index bbec164..fda018e 100644
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@@ -11,12 +11,15 @@ on:
 jobs:
   build-and-push:
     runs-on: ubuntu-latest
-    container:
-      image: docker:24-dind
-      options: --privileged
     steps:
       - name: Install dependencies
-        run: apk add --no-cache git bash
+        run: |
+          apk add --no-cache bash wget
+
+      - name: Install Kaniko
+        run: |
+          wget -O /usr/local/bin/executor https://github.com/GoogleContainerTools/kaniko/releases/download/v1.23.2/executor-linux-amd64
+          chmod +x /usr/local/bin/executor
 
       - name: Checkout code
         uses: actions/checkout@v4
@@ -58,27 +61,33 @@ jobs:
 
           echo "IMAGE_LATEST=${IMAGE_BASE}:latest" >> $GITHUB_OUTPUT
 
-      - name: Log in to Gitea Container Registry
+      - name: Setup Kaniko config
         run: |
-          echo "${{ secrets.PERSONAL_TOKEN }}" | docker login gitea.leeworks.dev -u "${{ gitea.actor }}" --password-stdin
+          mkdir -p /kaniko/.docker
+          cat > /kaniko/.docker/config.json <<EOF
+          {
+            "auths": {
+              "gitea.leeworks.dev": {
+                "auth": "$(echo -n "${{ gitea.actor }}:${{ secrets.PERSONAL_TOKEN }}" | base64)"
+              }
+            }
+          }
+          EOF
 
-      - name: Build Docker image
+      - name: Build and push with Kaniko
         run: |
-          echo "Building Docker image..."
+          echo "Building and pushing image with Kaniko..."
           if [[ "${{ steps.tags.outputs.PUSH_LATEST }}" == "true" ]]; then
-            docker build -t ${{ steps.tags.outputs.IMAGE_TAG }} -t ${{ steps.tags.outputs.IMAGE_LATEST }} .
+            /usr/local/bin/executor \
+              --context=/workspace/${{ gitea.repository }} \
+              --dockerfile=Dockerfile \
+              --destination=${{ steps.tags.outputs.IMAGE_TAG }} \
+              --destination=${{ steps.tags.outputs.IMAGE_LATEST }}
           else
-            docker build -t ${{ steps.tags.outputs.IMAGE_TAG }} .
-          fi
-
-      - name: Push Docker image
-        run: |
-          echo "Pushing Docker image to registry..."
-          docker push ${{ steps.tags.outputs.IMAGE_TAG }}
-
-          if [[ "${{ steps.tags.outputs.PUSH_LATEST }}" == "true" ]]; then
-            echo "Pushing latest tag..."
-            docker push ${{ steps.tags.outputs.IMAGE_LATEST }}
+            /usr/local/bin/executor \
+              --context=/workspace/${{ gitea.repository }} \
+              --dockerfile=Dockerfile \
+              --destination=${{ steps.tags.outputs.IMAGE_TAG }}
           fi
 
           echo "Build and push completed successfully!"