fix: harden CI cargo downloads

This commit is contained in:
Codex
2026-06-11 09:54:46 +00:00
parent 06f0c43867
commit f4d2b72405
4 changed files with 68 additions and 1 deletions
+11 -1
View File
@@ -2,7 +2,17 @@
FROM rust:1-bookworm AS build
WORKDIR /app/src/components/backend-core
ARG CARGO_BUILD_JOBS=1
ENV CARGO_BUILD_JOBS=${CARGO_BUILD_JOBS}
ARG CARGO_HTTP_TIMEOUT=180
ARG CARGO_HTTP_LOW_SPEED_LIMIT=1
ARG CARGO_NET_RETRY=5
ARG CARGO_HTTP_MULTIPLEXING=false
ARG CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse
ENV CARGO_BUILD_JOBS=${CARGO_BUILD_JOBS} \
CARGO_HTTP_TIMEOUT=${CARGO_HTTP_TIMEOUT} \
CARGO_HTTP_LOW_SPEED_LIMIT=${CARGO_HTTP_LOW_SPEED_LIMIT} \
CARGO_NET_RETRY=${CARGO_NET_RETRY} \
CARGO_HTTP_MULTIPLEXING=${CARGO_HTTP_MULTIPLEXING} \
CARGO_REGISTRIES_CRATES_IO_PROTOCOL=${CARGO_REGISTRIES_CRATES_IO_PROTOCOL}
COPY src/components/backend-core/Cargo.toml ./Cargo.toml
COPY src/components/backend-core/Cargo.lock ./Cargo.lock
RUN mkdir -p src \
@@ -448,6 +448,11 @@ spec:
--build-arg HTTPS_PROXY=http://127.0.0.1:18789 \
--build-arg ALL_PROXY=http://127.0.0.1:18789 \
--build-arg NO_PROXY=localhost,127.0.0.1,::1,host.docker.internal,registry.npmjs.org,.registry.npmjs.org \
--build-arg CARGO_HTTP_TIMEOUT=180 \
--build-arg CARGO_HTTP_LOW_SPEED_LIMIT=1 \
--build-arg CARGO_NET_RETRY=5 \
--build-arg CARGO_HTTP_MULTIPLEXING=false \
--build-arg CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
--label "unidesk.ai/service-id=backend-core" \
--label "unidesk.ai/source-repo=$(params.repo-url)" \
--label "unidesk.ai/source-commit=$commit" \
@@ -716,6 +721,11 @@ spec:
--build-arg HTTPS_PROXY=http://127.0.0.1:18789 \
--build-arg ALL_PROXY=http://127.0.0.1:18789 \
--build-arg NO_PROXY=localhost,127.0.0.1,::1,host.docker.internal,registry.npmjs.org,.registry.npmjs.org \
--build-arg CARGO_HTTP_TIMEOUT=180 \
--build-arg CARGO_HTTP_LOW_SPEED_LIMIT=1 \
--build-arg CARGO_NET_RETRY=5 \
--build-arg CARGO_HTTP_MULTIPLEXING=false \
--build-arg CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
--label "unidesk.ai/service-id=$service_id" \
--label "unidesk.ai/source-repo=$(params.repo-url)" \
--label "unidesk.ai/source-commit=$commit" \
@@ -448,6 +448,11 @@ spec:
--build-arg HTTPS_PROXY=http://127.0.0.1:18789 \
--build-arg ALL_PROXY=http://127.0.0.1:18789 \
--build-arg NO_PROXY=localhost,127.0.0.1,::1,host.docker.internal,registry.npmjs.org,.registry.npmjs.org \
--build-arg CARGO_HTTP_TIMEOUT=180 \
--build-arg CARGO_HTTP_LOW_SPEED_LIMIT=1 \
--build-arg CARGO_NET_RETRY=5 \
--build-arg CARGO_HTTP_MULTIPLEXING=false \
--build-arg CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
--label "unidesk.ai/service-id=backend-core" \
--label "unidesk.ai/source-repo=$(params.repo-url)" \
--label "unidesk.ai/source-commit=$commit" \
@@ -716,6 +721,11 @@ spec:
--build-arg HTTPS_PROXY=http://127.0.0.1:18789 \
--build-arg ALL_PROXY=http://127.0.0.1:18789 \
--build-arg NO_PROXY=localhost,127.0.0.1,::1,host.docker.internal,registry.npmjs.org,.registry.npmjs.org \
--build-arg CARGO_HTTP_TIMEOUT=180 \
--build-arg CARGO_HTTP_LOW_SPEED_LIMIT=1 \
--build-arg CARGO_NET_RETRY=5 \
--build-arg CARGO_HTTP_MULTIPLEXING=false \
--build-arg CARGO_REGISTRIES_CRATES_IO_PROTOCOL=sparse \
--label "unidesk.ai/service-id=$service_id" \
--label "unidesk.ai/source-repo=$(params.repo-url)" \
--label "unidesk.ai/source-commit=$commit" \