From 8ee95dabb9dcf38de176485380aec260f6d71d18 Mon Sep 17 00:00:00 2001
From: tegwick <bernd.worsch@gmail.com>
Date: Mon, 6 Jul 2026 18:28:11 +0200
Subject: [PATCH] fix(ci): gate image build on asyncpg and disable DinD layer
 cache

The main-f9f0091 Forgejo image shipped with an empty venv (0-byte
requirements.txt). Add Dockerfile RUN verification, --no-cache on CI
build, and a post-build import smoke test before push.
---
 .forgejo/workflows/image.yaml                    | 4 +++-
 Dockerfile                                       | 3 +++
 deploy/railiance/apps/helm/state-hub-values.yaml | 3 ++-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/image.yaml b/.forgejo/workflows/image.yaml
index f8d462e..d0e46d5 100644
--- a/.forgejo/workflows/image.yaml
+++ b/.forgejo/workflows/image.yaml
@@ -62,8 +62,10 @@ jobs:
           export PATH="${HOME}/bin:${PATH}"
           echo "${REGISTRY_TOKEN}" | docker login "${REGISTRY}" -u "${REGISTRY_USER}" --password-stdin
           IMAGE="${REGISTRY}/${IMAGE_NAME}"
-          docker build -f buildctx/Dockerfile.ci \
+          docker build --no-cache -f buildctx/Dockerfile.ci \
             -t "${IMAGE}:latest" -t "${IMAGE}:main-${SHORT}" buildctx
+          docker run --rm "${IMAGE}:main-${SHORT}" \
+            /app/.venv/bin/python -c "import asyncpg; print('asyncpg ok')"
           docker push "${IMAGE}:latest"
           docker push "${IMAGE}:main-${SHORT}"
           echo "pushed ${IMAGE}:latest and ${IMAGE}:main-${SHORT}"
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
index a38c61c..355764e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -36,6 +36,9 @@ COPY --from=hub_core_src hub_core/ /tmp/hub-core/hub_core/
 
 RUN uv pip install --python /app/.venv/bin/python --no-cache /tmp/hub-core
 
+RUN test -s /tmp/requirements.txt \
+    && /app/.venv/bin/python -c "import asyncpg"
+
 COPY alembic.ini ./
 COPY api/ ./api/
 COPY flows/ ./flows/
diff --git a/deploy/railiance/apps/helm/state-hub-values.yaml b/deploy/railiance/apps/helm/state-hub-values.yaml
index bee16d5..f248662 100644
--- a/deploy/railiance/apps/helm/state-hub-values.yaml
+++ b/deploy/railiance/apps/helm/state-hub-values.yaml
@@ -5,7 +5,8 @@ namespace:
   create: false
 
 image:
-  tag: "f2e042a"
+  repository: forgejo.coulomb.social/coulomb/state-hub
+  tag: "main-f9f0091"
 
 ingress:
   enabled: false