From 2079788fde4384f699a9c43edb2d028893b2d0c1 Mon Sep 17 00:00:00 2001
From: Markus Frei <markus.frei@linuxfabrik.ch>
Date: Mon, 24 Aug 2026 08:20:24 +0200
Subject: [PATCH] fix(ci): build the EE image without the registry prefix

push-to-registry v3 prefixes its push source with localhost/, while its
existence check keeps using the bare `image` input, which podman also
resolves to a local ghcr.io/... image. An image built as
ghcr.io/<owner>/lfops_ee therefore passes the check and fails the push
with "image not known". Building it unqualified puts it under
localhost/, where both steps find it.

Works with the currently pinned v2.8 as well, so it can land before the
bump does.
---
 .github/workflows/lf-build.yml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/lf-build.yml b/.github/workflows/lf-build.yml
index 74b3cdd2..fdb61a08 100644
--- a/.github/workflows/lf-build.yml
+++ b/.github/workflows/lf-build.yml
@@ -91,17 +91,23 @@ jobs:
             --server https://galaxy.ansible.com \
             --api-key "$ANSIBLE_GALAXY_TOKEN"
 
+      # Tagged without the registry prefix, so podman stores the image under
+      # localhost/.  push-to-registry derives its push source from the bare
+      # `image` input and prefixes that with localhost/, while its existence
+      # check uses the bare name and still resolves a `ghcr.io/...` image.
+      # A registry-prefixed local name therefore passes the check and fails
+      # the push.  Verified with podman 5.8.4 on Fedora 44.
       - name: 'Build Execution Environment'
         run: |
           ansible-builder build \
-            --tag 'ghcr.io/${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG1 }}' \
+            --tag '${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG1 }}' \
             -vvv
 
       - name: 'Re-tag the image'
         run: |
           podman tag \
-            'ghcr.io/${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG1 }}' \
-            'ghcr.io/${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG2 }}'
+            '${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG1 }}' \
+            '${{ env.GITHUB_REPOSITORY_OWNER_LOWERCASE }}/lfops_ee:${{ env.TAG2 }}'
 
       - name: 'Push to GitHub Container Registry'
         id: 'push-to-ghcr'