build: replace mirrored images from docker hub (#467)

Author: ovsds

.github/workflows/build_debian_docker.yml

@@ -33,9 +33,9 @@ jobs:
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v2
         with:
-          registry: ${{ env.image_url_base }}
+          registry: "ghcr.io/${{ github.repository_owner }}"
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.ROBOT_GITHUB_PACKAGES_WRITE_TOKEN }}
 
       - name: Build and push
         uses: docker/build-push-action@v4

.github/workflows/main.yml

@@ -136,7 +136,7 @@ jobs:
         with:
           registry: "ghcr.io"
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.ROBOT_GITHUB_PACKAGES_WRITE_TOKEN }}
 
       - name: Cleanup build folder
         run: |

.github/workflows/terrarium_check.yaml

@@ -13,7 +13,10 @@ jobs:
   pytest:
     runs-on: [ self-hosted, linux ]
     container:
-      image: "python:3.11.0"
+      image: "ghcr.io/${{ github.repository_owner }}/docker-mirror/python:3.11.0"
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.ROBOT_GITHUB_PACKAGES_READ_TOKEN }}
 
     strategy:
       fail-fast: false
@@ -45,7 +48,10 @@ jobs:
   mypy:
     runs-on: [ self-hosted, linux ]
     container:
-      image: "python:3.11.0"
+      image: "ghcr.io/${{ github.repository_owner }}/docker-mirror/python:3.11.0"
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.ROBOT_GITHUB_PACKAGES_READ_TOKEN }}
 
     strategy:
       fail-fast: false

docker_build/_bake_vars_functions.hcl

@@ -1,15 +1,15 @@
 # All variables should be prefixed with `DL_B_`
 
 variable BASE_LINUX {
-  default = "ubuntu:22.04"
+  default = "ghcr.io/datalens-tech/docker-mirror/ubuntu:22.04"
 }
 
 variable DL_B_PROJECT_ROOT {
   default = ".."
 }
 
 variable DL_B_FILE_OPS_IMG {
-  default = "debian:bookworm-slim"
+  default = "ghcr.io/datalens-tech/docker-mirror/debian:bookworm-slim"
 }
 
 variable DL_B_EXT_CACHED_TARGET_BASE_CI {

docker_build/debian_docker/Dockerfile

@@ -1,4 +1,4 @@
-FROM debian:bookworm
+FROM ghcr.io/datalens-tech/docker-mirror/debian:bookworm
 
 # run all scripts in ./scripts in alphabetical order
 COPY ./scripts /tmp/scripts

docker_build/target_base_ci/scripts/700-venv.sh

@@ -6,7 +6,8 @@ mkdir /venv
 python -m venv /venv
 source /venv/bin/activate
 
-pip install --no-input poetry==1.7.1
+# TODO FIX: pyproject-hooks fix version: https://github.com/python-poetry/poetry/issues/9351
+pip install --no-input poetry==1.7.1 pyproject-hooks==1.0.0
 
 cd /src/metapkg
 poetry export --without=dev --without=ci --without-hashes --format=requirements.txt > requirements.txt

docker_build/target_base_jammy/Dockerfile

@@ -27,7 +27,8 @@ RUN bash /install/install_py_310.sh
 RUN curl -sS https://bootstrap.pypa.io/get-pip.py | python3.10
 RUN python3 -m pip install -U pip
 # TODO FIX: try to install j2cli to dedicated venv & make symlink in /usr/local/bin
-RUN python3 -m pip install poetry==1.7.1 j2cli==0.3.10
+# TODO FIX: pyproject-hooks fix version: https://github.com/python-poetry/poetry/issues/9351
+RUN python3 -m pip install poetry==1.7.1 j2cli==0.3.10 pyproject-hooks==1.0.0
 
 RUN curl "https://storage.yandexcloud.net/cloud-certs/CA.pem" > /usr/local/share/ca-certificates/yandex-cloud-ca.crt
 RUN update-ca-certificates