From 9931db2670659f4f47cbabdfd1fd71b844dbe9bd Mon Sep 17 00:00:00 2001
From: l3126596029 <skymirror@skymirror.top>
Date: Sat, 5 Sep 2026 07:01:11 +0800
Subject: [PATCH] =?UTF-8?q?CI=EF=BC=9Abuildx=20=E6=94=B9=E7=94=A8=20dind?=
 =?UTF-8?q?=20=E5=86=85=E7=BD=AE=20default=20builder=EF=BC=88=E7=BB=A7?=
 =?UTF-8?q?=E6=89=BF=20registry=20mirror=EF=BC=9Bdocker-container=20?=
 =?UTF-8?q?=E9=A9=B1=E5=8A=A8=E4=B8=8D=E7=BB=A7=E6=89=BF=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/release-image.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/release-image.yml b/.gitea/workflows/release-image.yml
index ead1940..70d68d3 100644
--- a/.gitea/workflows/release-image.yml
+++ b/.gitea/workflows/release-image.yml
@@ -105,11 +105,13 @@ jobs:
         env:
           TAGS: ${{ steps.meta.outputs.tags }}
         run: |
-          docker buildx create --name ci --driver docker-container --use 2>/dev/null || docker buildx use ci
           ARGS=""
           for t in $TAGS; do ARGS="$ARGS -t $t"; done
+          # 用 dind 内置 default builder：走 dockerd 的 registry mirror（docker-container
+          # 驱动是独立 BuildKit，不继承 daemon.json 的 mirrors）
           # provenance/sbom 必须关：阿里云 ACR 不识别 OCI empty manifest（attestation）
           docker buildx build \
+            --builder default \
             --platform linux/amd64,linux/arm64 \
             --provenance=false --sbom=false \
             --push \