Stop mirroring self-host Docker releases to the legacy GHCR namespace

Merged
MA
2mo ago
+0-54

Summary

Stop this fork's self-host Docker publish path from mirroring releases to ghcr.io/rhyssullivan/executor-selfhost.

The workflow still derives the owner from GITHUB_REPOSITORY_OWNER and keeps the image name executor-selfhost. On this fork that publishes ghcr.io/marcelruhf/executor-selfhost. Tag scheme is unchanged: vX.Y.Z / X.Y.Z / latest for stable, and the prerelease equivalents plus beta.

Public docs and RELEASING.md are left on the upstream image path. This PR does not edit fork-specific documentation.

Linked issue

None. Fork release-image retarget requested separately from the oauth/CIMD work.

What changed

  • .github/workflows/publish-selfhost-docker.yml — drop legacy_tags and the mirror-legacy job that pushed to ghcr.io/rhyssullivan/executor-selfhost via GHCR_LEGACY_TOKEN

No documentation, changelog, npm package, or local/CI image-name changes.

This branch is cut from current marcelruhf/executor main only. It does not reuse or amend feat/oauth-cimd-deployment-capability.

Verification

  • Diff against main is the one workflow file above.

  • Workflow image line remains image="ghcr.io/${owner}/executor-selfhost"; no legacy_image, legacy_tags, GHCR_LEGACY_TOKEN, or rhyssullivan remain in that workflow.

  • No changeset: this is fork release-path only, not a published package behavior change.

  • Scoped review of GHCR / executor-selfhost / usefulsoftwareco / rhyssullivan / GHCR_LEGACY references

  • bun run format:check

  • bun run lint

  • bun run typecheck

  • bun run test

  • e2e — not run; no scenario covers GHCR publish target

Checklist

  • Added a changeset (bun run changeset), or this change needs none.
  • Added or updated tests for the new behaviour. (n/a — release workflow only)
  • No secrets, credentials, or private data in the diff.

After merge: GHCR setup

The first publish from this fork creates ghcr.io/marcelruhf/executor-selfhost. Confirm:

  1. Actions has packages: write (the workflow already requests it).
  2. The GITHUB_TOKEN used by publish-selfhost-docker.yml can push to GHCR under marcelruhf.
  3. After the first push, set the package visibility to public if anonymous pulls should work.
  4. GHCR_LEGACY_TOKEN is no longer used by this workflow and can be removed from repo secrets if nothing else needs it.
  5. npm package names are unchanged.
Open in Web Open in Cursor 

Summary by cubic

Stops this fork's self-host Docker releases from mirroring to ghcr.io/rhyssullivan/executor-selfhost; images now publish only to the fork's owner-derived path. After merge, set the new GHCR package visibility to public if anonymous pulls should work; GHCR_LEGACY_TOKEN can be removed from repo secrets if nothing else uses it.

  • Removes the mirror-legacy job and its GHCR_LEGACY_TOKEN usage.
  • Keeps the existing tag scheme (vX.Y.Z, X.Y.Z, latest, plus prerelease equivalents and beta).
  • Public docs and RELEASING.md stay on the upstream image path; local build tags, compose image names, and the container name are unchanged.

Summary by CodeRabbit

  • Documentation

    • Updated self-hosting instructions to use the current Docker image location.
    • Updated tracing setup examples with the current self-hosted Docker image.
    • Revised release documentation to reflect the current image publishing location.

  • Changes

    • Stopped publishing release images to the legacy Docker image location.