From 21176d7f64824161e63eac80ab1f3df8ab9c84dc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jan=20Doubravsk=C3=BD?= <jan.doubravsky@gmail.com>
Date: Mon, 28 Sep 2026 18:54:52 +0200
Subject: [PATCH] Disable build provenance so per-arch tags can be merged into
 a manifest

---
 .gitea/workflows/ci.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 39e79a6..6b3ba7d 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -63,9 +63,11 @@ jobs:
           echo '${{ secrets.REGISTRY_TOKEN }}' \
             | docker login gitea.doubynet.eu -u '${{ github.actor }}' --password-stdin
 
+      # --provenance=false: bez atestace je per-arch tag obyčejný obrázek. S ní by to byl
+      # index (obrázek + atestace) a `docker manifest create` index do indexu nespojí.
       - name: Build image (${{ matrix.arch }})
         run: |
-          docker build \
+          docker build --provenance=false \
             -t "$IMAGE:$MOVING_TAG-${{ matrix.arch }}" \
             -t "$IMAGE:${{ github.sha }}-${{ matrix.arch }}" .