From 3a7fe235b11f2091640dad807f80f7db4df6f640 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Mon, 6 Jul 2026 18:42:32 +0200
Subject: [PATCH] fix(ci): store requirements.txt under /app not /tmp

DinD legacy builder does not persist /tmp across RUN steps, so uv pip
install could not find requirements.txt on the next layer.
---
 .forgejo/workflows/image.yaml |  2 +-
 Dockerfile                    | 13 +++++++------
 2 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/.forgejo/workflows/image.yaml b/.forgejo/workflows/image.yaml
index 6e3bec0..ad83cb2 100644
--- a/.forgejo/workflows/image.yaml
+++ b/.forgejo/workflows/image.yaml
@@ -65,7 +65,7 @@ jobs:
           export PATH="${HOME}/bin:${PATH}"
           echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" -u "${REGISTRY_USER}" --password-stdin
           IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          docker build --build-arg DEPS_LOCK_ID=3 -f buildctx/Dockerfile.ci \
+          docker build --build-arg DEPS_LOCK_ID=4 -f buildctx/Dockerfile.ci \
             -t "${IMAGE}:latest" -t "${IMAGE}:main-${SHORT}" buildctx
           docker push "${IMAGE}:latest"
           docker push "${IMAGE}:main-${SHORT}"
diff --git a/Dockerfile b/Dockerfile
index afb5b03..6c4e784 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@ RUN apt-get update \
 COPY pyproject.toml ./
 
 # Bump DEPS_LOCK_ID when dependency wiring changes (busts DinD layer cache).
-ARG DEPS_LOCK_ID=3
+ARG DEPS_LOCK_ID=4
 RUN echo "deps-lock=${DEPS_LOCK_ID}" && python - <<'PY'
 import sys
 import tomllib
@@ -36,21 +36,22 @@ lines = [
 if not lines:
     sys.exit("no installable dependencies after filter")
 
-Path("/tmp/requirements.txt").write_text("\n".join(lines) + "\n", encoding="utf-8")
-if Path("/tmp/requirements.txt").stat().st_size == 0:
+req_path = Path("/app/requirements.txt")
+req_path.write_text("\n".join(lines) + "\n", encoding="utf-8")
+if req_path.stat().st_size == 0:
     sys.exit("requirements.txt is empty")
-print(f"wrote {len(lines)} requirements")
+print(f"wrote {len(lines)} requirements to {req_path}")
 PY
 
 RUN uv venv /app/.venv \
-    && uv pip install --python /app/.venv/bin/python --no-cache -r /tmp/requirements.txt
+    && uv pip install --python /app/.venv/bin/python --no-cache -r /app/requirements.txt
 
 COPY --from=hub_core_src pyproject.toml /tmp/hub-core/pyproject.toml
 COPY --from=hub_core_src hub_core/ /tmp/hub-core/hub_core/
 
 RUN uv pip install --python /app/.venv/bin/python --no-cache /tmp/hub-core
 
-RUN test -s /tmp/requirements.txt \
+RUN test -s /app/requirements.txt \
     && /app/.venv/bin/python -c "import asyncpg"
 
 COPY alembic.ini ./