Build static musl OCSP image in Gitea Actions

2026-10-23 10:00:36 +00:00
parent 0384995570
commit 69d78939a1
9 changed files with 166 additions and 535 deletions
@@ -160,6 +160,9 @@ bucket and ships a standalone Rust/Axum responder on port `2560`.
  concurrent requests cause at most one S3 `GetObject` per CA per second.
 - If S3 is unavailable, a stale snapshot is served within the configured grace
  period; otherwise the responder returns `tryLater`.
+- Gitea Actions publishes `gitea.woggioni.net/woggioni/kca-ocsp` on the same
+  `release/*` tags as the server image. The responder image is a statically
+  linked musl executable running `FROM scratch` with only the CA bundle.

 Enable publishing in KCA with `KCA_OCSP_S3_BUCKET` and the other
 `KCA_OCSP_*` variables in `server/.env.example`. Run the responder with a