From 674a769a11e9309a12ea4f65fd9dcf7a4f5ff2b1 Mon Sep 17 00:00:00 2001
From: Aleksandr Meshchriakov <avm@sh-inc.ru>
Date: Wed, 18 Feb 2026 14:00:32 +0100
Subject: [PATCH] =?UTF-8?q?CI:=20=D1=84=D0=B8=D0=BA=D1=81=20=D1=80=D0=B5?=
 =?UTF-8?q?=D0=B7=D0=BE=D0=BB=D0=B2=D0=B8=D0=BD=D0=B3=D0=B0=20token=20endp?=
 =?UTF-8?q?oint=20=D1=87=D0=B5=D1=80=D0=B5=D0=B7=20=D0=B2=D0=BD=D1=83?=
 =?UTF-8?q?=D1=82=D1=80=D0=B5=D0=BD=D0=BD=D0=B8=D0=B9=20IP=2010.10.0.10?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .gitea/workflows/ci-cd.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/.gitea/workflows/ci-cd.yml b/.gitea/workflows/ci-cd.yml
index 01f73a0..b1e9b5b 100644
--- a/.gitea/workflows/ci-cd.yml
+++ b/.gitea/workflows/ci-cd.yml
@@ -169,9 +169,15 @@ jobs:
           SHA_SHORT=$(echo "${GITHUB_SHA}" | cut -c1-7)
           REPO_OWNER="${GITHUB_REPOSITORY%%/*}"
           REGISTRY="${REGISTRY_HOST}/${REPO_OWNER}"
+          GITEA_HOST=$(echo "${GITHUB_SERVER_URL}" | sed -E 's#https?://([^/:]+).*#\1#')
 
           echo "Registry: ${REGISTRY_HOST}"
           echo "Actor: ${GITHUB_ACTOR}"
+          echo "Gitea host: ${GITEA_HOST}"
+
+          # Ensure token endpoint host resolves to internal network IP from runner.
+          # Registry auth flow may redirect to ${GITEA_HOST} even when pushing to REGISTRY_HOST.
+          echo "10.10.0.10 ${GITEA_HOST}" >> /etc/hosts
 
           echo "${REGISTRY_PASSWORD}" | ./crane auth login --insecure "${REGISTRY_HOST}" -u "${REGISTRY_USER}" --password-stdin