Mirror valkey 8.1 locally for paperless and immich #346

Merged

eblume merged 2 commits from valkey-mirror into main

2026-05-01 17:40:05 -07:00

eblume commented

2026-05-01 17:39:03 -07:00

Owner

Summary

Add native Dagger build of valkey 8.1.6-r0 on Alpine 3.22 at containers/valkey/
Swap paperless redis sidecar and immich-valkey from docker.io/valkey/valkey:8.1-alpine to registry.ops.eblu.me/blumeops/valkey:v8.1.6-r0-946fa75
Resolves the DR-2026-04 TODO in paperless kustomization about multi-arch redis

Why

Move toward fully locally-built containers for supply chain control. Paperless and immich both pulled the same upstream tag — one mirror serves both. Authentik's nix-built Redis stays separate (different image entirely).

Risk

Low. Both sidecars are stateless caches:

paperless redis: no volumeMount (in-pod localhost, pure memory)
immich-valkey: emptyDir (cache only)

Pod restart rebuilds the cache. Smoke-tested locally (PING/SET/GET roundtrip on valkey 8.1.6 with --bind 0.0.0.0 --protected-mode no).

Test plan

After merge: mise run container-build-and-release valkey to rebuild with main SHA
Update kustomizations to the [main] SHA tag (C0 follow-up)
argocd app sync paperless and argocd app sync immich
Verify pods come up healthy (paperless OCR queue functional, immich job queue functional)
mise run services-check

🤖 Generated with Claude Code

## Summary - Add native Dagger build of valkey 8.1.6-r0 on Alpine 3.22 at `containers/valkey/` - Swap paperless redis sidecar and immich-valkey from `docker.io/valkey/valkey:8.1-alpine` to `registry.ops.eblu.me/blumeops/valkey:v8.1.6-r0-946fa75` - Resolves the DR-2026-04 TODO in paperless kustomization about multi-arch redis ## Why Move toward fully locally-built containers for supply chain control. Paperless and immich both pulled the same upstream tag — one mirror serves both. Authentik's nix-built Redis stays separate (different image entirely). ## Risk Low. Both sidecars are stateless caches: - paperless redis: no volumeMount (in-pod localhost, pure memory) - immich-valkey: `emptyDir` (cache only) Pod restart rebuilds the cache. Smoke-tested locally (PING/SET/GET roundtrip on `valkey 8.1.6` with `--bind 0.0.0.0 --protected-mode no`). ## Test plan - [ ] After merge: `mise run container-build-and-release valkey` to rebuild with main SHA - [ ] Update kustomizations to the `[main]` SHA tag (C0 follow-up) - [ ] `argocd app sync paperless` and `argocd app sync immich` - [ ] Verify pods come up healthy (paperless OCR queue functional, immich job queue functional) - [ ] `mise run services-check` 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 2 commits

2026-05-01 17:39:03 -07:00

C1(valkey-mirror): add valkey container build 946fa75baa

Native Dagger build of valkey 8.1.6-r0 on Alpine 3.22. Mirrors upstream
docker.io/valkey/valkey:8.1-alpine for paperless and immich sidecars.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

C1(valkey-mirror): swap paperless and immich to local valkey cfab8d4881

Switches paperless redis sidecar and immich-valkey to the locally-built
registry.ops.eblu.me/blumeops/valkey image. Sidecars are stateless
(paperless: no PV, immich: emptyDir cache) so this is a clean tag swap.

Drops the DR-2026-04 TODO in paperless about multi-arch redis — resolved
by this mirror.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>