Erich Blume
fabca04771
## Summary - Add native Dagger build of valkey 8.1.6-r0 on Alpine 3.22 at `containers/valkey/` - Swap paperless redis sidecar and immich-valkey from `docker.io/valkey/valkey:8.1-alpine` to `registry.ops.eblu.me/blumeops/valkey:v8.1.6-r0-946fa75` - Resolves the DR-2026-04 TODO in paperless kustomization about multi-arch redis ## Why Move toward fully locally-built containers for supply chain control. Paperless and immich both pulled the same upstream tag — one mirror serves both. Authentik's nix-built Redis stays separate (different image entirely). ## Risk Low. Both sidecars are stateless caches: - paperless redis: no volumeMount (in-pod localhost, pure memory) - immich-valkey: `emptyDir` (cache only) Pod restart rebuilds the cache. Smoke-tested locally (PING/SET/GET roundtrip on `valkey 8.1.6` with `--bind 0.0.0.0 --protected-mode no`). ## Test plan - [ ] After merge: `mise run container-build-and-release valkey` to rebuild with main SHA - [ ] Update kustomizations to the `[main]` SHA tag (C0 follow-up) - [ ] `argocd app sync paperless` and `argocd app sync immich` - [ ] Verify pods come up healthy (paperless OCR queue functional, immich job queue functional) - [ ] `mise run services-check` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: #346 |
||
|---|---|---|
| .. | ||
| alloy | ||
| authentik | ||
| authentik-redis | ||
| forgejo-runner | ||
| frigate-notify | ||
| grafana | ||
| grafana-sidecar | ||
| homepage | ||
| kingfisher | ||
| kiwix-serve | ||
| kube-state-metrics | ||
| kubectl | ||
| loki | ||
| mealie | ||
| miniflux | ||
| navidrome | ||
| ntfy | ||
| paperless | ||
| prometheus | ||
| prowler | ||
| runner-job-image | ||
| tempo | ||
| teslamate | ||
| transmission | ||
| transmission-exporter | ||
| unpoller | ||
| valkey | ||