Jacob Blain Christen

> [!NOTE] > If you are attempting a work-around until a fix is in place, any alternate location you have setup will need to be: > - on a filesystem...

file blob refs have the same naming restrictions as any other oci image. the tilde is a disallowed character as per spec, iirc. see: - https://github.com/distribution/reference/blob/284a39eaf3368476e0a4c6114a0eec61220acdd9/reference.go#L6-L26 - https://github.com/opencontainers/image-spec/blob/v1.0.2/annotations.md?plain=1#L31-L40 --- that...

> @dweomer Understood. Shame that the official RKE2 rpms upstream have a tilde in it then. I think we can get around this with some annotation hackery.

> @erikwilson are there things here that could get into k8s 1.22? Is there a better place to look at how the upstreaming efforts are going on? This is probably...

Oh, hey! All checks are all passing. Any objections to merging this @priyawadhwa?

So, updating the system ca trust got me further, i.e.: ```bash # runner startup tweaks sudo ln -vs /etc/docker/certs.d/build.cache.svc/ca.crt /usr/local/share/ca-certificates/build-cache-svc.crt sudo update-ca-certificates ``` But then I see this in the...

hi @tonistiigi, i do not understand this edit:  our `build.cache.svc` registry is _secured_ via mTLS (with some dummy basic auth) which buildkitd backend(s) push to without issue but with...

was digging into this further yesterday (because i am unreasonably angry that the awesome buildx imagetools fails like this) and it looks like a problem with the containerd resolver that...