2 Commits

Author	SHA1	Message	Date
benjamin.baker	e2c34d9553	build images via remote BuildKit instead of a local docker daemon ... arc-runner-set pods have no docker daemon and cannot run a privileged DinD sidecar under cluster policy, so Set up Buildx failed to connect to /var/run/docker.sock. Point Buildx at a persistent rootless buildkitd Service (driver: remote, endpoint from the BUILDKIT_ENDPOINT secret) and add its non-privileged Kubernetes manifest. Infra only; no application code changes.	2026-09-02 09:43:54 -04:00
benjamin.baker	d0e9f80287	distribute prebuilt channel images via GHCR instead of building on pilots ... Pilots behind the inspecting proxy cannot reliably build the frontend from source; npm's many small fetches get reset mid-install. Build the image once in CI on the clean runners and have pilots pull the finished channel image. One resumable image pull survives the proxy where hundreds of npm requests do not, and a pilot now needs only Docker.	2026-09-02 09:34:40 -04:00