Use writable Docker configuration on staging hosts

Use writable Docker configuration on staging hosts

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Not deployed through the forge lane

No push, promotion, build, or deploy receipt references this commit (receipts are scanned over a bounded recent window). Changes shipped by full node replacement carry their proof in the release gate receipt instead.

Changed files

modified infra/staging/templates/deployer-startup.sh.tftpl
modified infra/staging/templates/fleet-startup.sh.tftpl

Diff

2 files changed, +6 -0

unset release_cookie

chmod 0600 /run/openagents/deployer.env
export DOCKER_CONFIG=/run/openagents/docker-config
mkdir -p "$DOCKER_CONFIG"
chmod 0700 "$DOCKER_CONFIG"
docker-credential-gcr configure-docker --registries=${region}-docker.pkg.dev
docker pull "$image"
docker rm --force openagents-deployer 2>/dev/null || true

RELEASE_NODE=openagents@$instance_name.staging.internal
EOF

export DOCKER_CONFIG=/run/openagents/docker-config
mkdir -p "$DOCKER_CONFIG"
chmod 0700 "$DOCKER_CONFIG"
docker-credential-gcr configure-docker --registries=${region}-docker.pkg.dev
docker pull "$image"
docker rm --force openagents 2>/dev/null || true

59	59		`unset release_cookie`
60	60
61	61		`chmod 0600 /run/openagents/deployer.env`
	62	+	`export DOCKER_CONFIG=/run/openagents/docker-config`
	63	+	`mkdir -p "$DOCKER_CONFIG"`
	64	+	`chmod 0700 "$DOCKER_CONFIG"`
62	65		`docker-credential-gcr configure-docker --registries=${region}-docker.pkg.dev`
63	66		`docker pull "$image"`
64	67		`docker rm --force openagents-deployer 2>/dev/null \|\| true`

139	139		`RELEASE_NODE=openagents@$instance_name.staging.internal`
140	140		`EOF`
141	141
	142	+	`export DOCKER_CONFIG=/run/openagents/docker-config`
	143	+	`mkdir -p "$DOCKER_CONFIG"`
	144	+	`chmod 0700 "$DOCKER_CONFIG"`
142	145		`docker-credential-gcr configure-docker --registries=${region}-docker.pkg.dev`
143	146		`docker pull "$image"`
144	147		`docker rm --force openagents 2>/dev/null \|\| true`