From 113c51453193dcb08a10f71af108c3520cdbd899 Mon Sep 17 00:00:00 2001
From: l3126596029 <skymirror@skymirror.top>
Date: Sat, 5 Sep 2026 07:50:28 +0800
Subject: [PATCH] =?UTF-8?q?CI=EF=BC=9Abuild-push=20=E5=86=85=E5=88=9B?=
 =?UTF-8?q?=E5=BB=BA=20multiarch=20builder=EF=BC=88docker-container=20?=
 =?UTF-8?q?=E9=A9=B1=E5=8A=A8=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/release-image.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/release-image.yml b/.gitea/workflows/release-image.yml
index 82a4ceb..99898ea 100644
--- a/.gitea/workflows/release-image.yml
+++ b/.gitea/workflows/release-image.yml
@@ -107,9 +107,12 @@ jobs:
         run: |
           # docker-container 驱动才支持多平台。基础镜像/APK/NPM 全部走国内源：
           # runner 侧网络对 docker.io 存在 DNS 污染（证书误配 facebook 域），不可直连
+          docker buildx create --name multiarch --driver docker-container >/dev/null 2>&1 || true
+          docker buildx use multiarch
           ARGS=""
           for t in $TAGS; do ARGS="$ARGS -t $t"; done
           # provenance/sbom 必须关：阿里云 ACR 不识别 OCI empty manifest（attestation）
+          # buildx 会把 docker login 的 ACR 凭据转发给 buildkitd（私有基础镜像可拉）
           docker buildx build \
             --builder multiarch \
             --platform linux/amd64,linux/arm64 \