chore: replace LAN-IP refs with public mirror URLs

Cargo.toml + Cargo.lock now point at https://github.com/Sulkta-Coop/pallas
for the pallas-fork patch entries. External clones from either public
mirror (github.com/Sulkta-Coop or gitlab.com/sulkta) build out of the box
— no LAN access needed.

internal builds short-circuit to the git remote via a `git config
url.X.insteadOf` rewrite on each host. Symmetric: covers both github and
gitlab → gitea. Same locked SHA either way; routing is environment-level,
not source-of-truth. See docs/internal-build-rewrites.md.

Dockerfile build-time rewrite also flipped to take public-URL inputs;
uses `git.sulkta.com` instead of the bare LAN IP.
This commit is contained in:
Sulkta 2026-05-10 14:46:05 -07:00
parent fc29ad6e03
commit 2372bd2e46
3 changed files with 35 additions and 24 deletions

View file

@ -45,14 +45,19 @@ COPY crates ./crates
# trick above leaves stale build artifacts otherwise.
RUN find crates -name '*.rs' -exec touch {} +
# Fetch the pallas patch dep via HTTP+PAT at build time. Source URLs
# stay SSH (Cargo.toml + Cargo.lock) — the rewrite is git-CLI-level
# only, so no credential gets baked into the lock file or the image.
# Build-time URL rewrite: route the public github/gitlab pallas URLs
# (which is what Cargo.toml declares — source-of-truth, portable to
# external clones) back to the LAN gitea over HTTP+PAT. This is purely
# a fetch-time short-circuit: no LAN URL or credential is baked into
# Cargo.lock or the image. The lock file's locked SHA stays identical
# whether fetched via github, gitlab, or local gitea.
#
# Pass `--secret id=git_credentials,src=<file>` where <file> is one
# line: http://USER:PAT@git.sulkta.com
RUN --mount=type=secret,id=git_credentials,target=/root/.git-credentials,mode=0400,required=true \
git config --global credential.helper store && \
git config --global url."https://git.sulkta.com/".insteadOf "https://git.sulkta.com/" && \
git config --global url."https://git.sulkta.com/Sulkta-Coop/".insteadOf "https://github.com/Sulkta-Coop/" && \
git config --global url."https://git.sulkta.com/Sulkta-Coop/".insteadOf "https://gitlab.com/sulkta/" && \
cargo build --release --bin aldabra && \
strip target/release/aldabra