From 610ca91fdb3ec89dffaa8dcb2fa15e1b20e35b4f Mon Sep 17 00:00:00 2001
From: vikingowl <christian@nachtigall.dev>
Date: Tue, 7 Apr 2026 03:29:52 +0200
Subject: [PATCH] fix: use buildx --push --provenance=false to avoid OCI
 manifest rejection

---
 .gitlab-ci.yml | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 58aa98f..3470be7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -4,7 +4,6 @@ variables:
   REGISTRY: registry.itsh.dev
   BACKEND_IMAGE: registry.itsh.dev/vikingowl/marktvogt.de/backend
   WEB_IMAGE: registry.itsh.dev/vikingowl/marktvogt.de/web
-  DOCKER_BUILDKIT: "0"
 
 # ── Backend ─────────────────────────────────────────────────────────────────
 
@@ -18,8 +17,7 @@ backend:docker:
   before_script:
     - docker login -u "$REGISTRY_USER" -p "$REGISTRY_PASSWORD" $REGISTRY
   script:
-    - docker build -f backend/deploy/Dockerfile -t "$BACKEND_IMAGE:${CI_COMMIT_SHORT_SHA}" backend/
-    - docker push "$BACKEND_IMAGE:${CI_COMMIT_SHORT_SHA}"
+    - docker buildx build --push --provenance=false -f backend/deploy/Dockerfile -t "$BACKEND_IMAGE:${CI_COMMIT_SHORT_SHA}" backend/
   rules:
     - if: '$CI_COMMIT_BRANCH == "main"'
       changes: [backend/**/*]
@@ -61,11 +59,11 @@ web:docker:
     - docker login -u "$REGISTRY_USER" -p "$REGISTRY_PASSWORD" $REGISTRY
   script:
     - |
-      docker build -f web/Dockerfile \
+      docker buildx build --push --provenance=false \
+        -f web/Dockerfile \
         --build-arg PUBLIC_API_BASE_URL=https://api.marktvogt.de \
         --build-arg PUBLIC_TURNSTILE_SITE_KEY=0x4AAAAAACjLCV-78Ql1oTPz \
         -t "$WEB_IMAGE:${CI_COMMIT_SHORT_SHA}" web/
-    - docker push "$WEB_IMAGE:${CI_COMMIT_SHORT_SHA}"
   rules:
     - if: '$CI_COMMIT_BRANCH == "main"'
       changes: [web/**/*]