Merge pull request 'ci(giteastry): passage au build hermétique dind et image giteastry' (#3) from dev/m7s into main

Reviewed-on: #3

.gitea/workflows/ci.yml

@@ -7,19 +7,19 @@ on:
 jobs:
   build-and-push-runner:
     name: Build & Publish Runner Image to Giteastry
-    runs-on: host
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
 
-      - name: Login to Giteastry
+      - name: Authentification Giteastry
         run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | podman login container.rym.local -u ${{ gitea.actor }} --password-stdin
+          echo "${{ secrets.GITEA_TOKEN }}" | docker login container.rym.local -u ${{ gitea.actor }} --password-stdin
 
-      - name: Build Runner Image
+      - name: Build Image Runner
         run: |
-          podman build -t container.rym.local/rym/devsecops-runner:latest .
+          docker build -t container.rym.local/rym/devsecops-runner:latest .
 
-      - name: Push to Giteastry
+      - name: Push vers Giteastry
         run: |
-          podman push container.rym.local/rym/devsecops-runner:latest
+          docker push container.rym.local/rym/devsecops-runner:latest

Dockerfile

@@ -1,6 +1,7 @@
-FROM docker.io/alpine:3.19
+# SOURCE INTERNE STRICTE (Giteastry)
+FROM container.rym.local/mirror/alpine:3.19
 
-# Dépendances de base et sécurité
+# Outillage pré-installé dans le runner central
 RUN apk add --no-cache \
     bash \
     curl \
@@ -9,8 +10,7 @@ RUN apk add --no-cache \
     py3-pip \
     docker-cli
 
-# Outils DevSecOps pré-installés
 RUN pip install --no-cache-dir yamllint && \
-    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \
+    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/v1.36.3/bin/linux/amd64/kubectl" && \
     curl -sSLo /usr/local/bin/helm "https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz" && \
     chmod +x /usr/local/bin/kubectl