feat: use skopeo to copy manifests from GHCR to Docker Hub

- Create multi-arch manifests on GHCR first (no rate limits)
- Use skopeo copy --all to replicate to Docker Hub repos
- Avoids Docker Hub pull rate limits during manifest creation
- Keeps retry logic for skopeo copy commands

Author: hertzg

.github/workflows/build-group.yml

@@ -10,7 +10,11 @@ on:
         required: true
         type: boolean
         default: false
-      manifestCmds:
+      ghcrManifestCmds:
+        required: false
+        type: string
+        default: ""
+      skopeoCopyCmds:
         required: false
         type: string
         default: ""
@@ -57,7 +61,7 @@ jobs:
   manifest:
     name: 📦 Manifest
     needs: build
-    if: ${{ inputs.push && inputs.manifestCmds != '' }}
+    if: ${{ inputs.push && inputs.ghcrManifestCmds != '' }}
     runs-on: ubuntu-latest
     concurrency:
       group: docker-manifest
@@ -72,12 +76,22 @@ jobs:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-      - name: Create multi-arch manifests
+      - name: Create GHCR multi-arch manifests
+        run: |
+          echo '${{ inputs.ghcrManifestCmds }}' | while IFS= read -r cmd; do
+            [ -z "$cmd" ] && continue
+            eval "$cmd"
+          done
+      - name: Copy to Docker Hub with skopeo
+        env:
+          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
+          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          echo '${{ inputs.manifestCmds }}' | while IFS= read -r cmd; do
+          echo '${{ inputs.skopeoCopyCmds }}' | while IFS= read -r cmd; do
             [ -z "$cmd" ] && continue
             for attempt in 1 2 3 4 5; do
-              if eval "$cmd"; then
+              if $cmd --src-creds="${{ github.actor }}:${GITHUB_TOKEN}" --dest-creds="${DOCKER_USERNAME}:${DOCKER_PASSWORD}"; then
                 break
               fi
               echo "Attempt $attempt failed, waiting ${attempt}0s..."

.github/workflows/build.yml

@@ -36,5 +36,6 @@ jobs:
     with:
       tasks: ${{ toJson(matrix.tasks) }}
       push: ${{ github.ref == 'refs/heads/master' || github.event_name == 'schedule' }}
-      manifestCmds: ${{ matrix.manifestCmds }}
+      ghcrManifestCmds: ${{ matrix.ghcrManifestCmds }}
+      skopeoCopyCmds: ${{ matrix.skopeoCopyCmds }}
     secrets: inherit

src/main.ts

@@ -27,11 +27,9 @@ export interface BuildTask {
   cacheTo: string;
 }
 
-const REPOS = [
-  "hertzg/rtl433",
-  "hertzg/rtl_433",
-  "ghcr.io/hertzg/rtl_433_docker",
-];
+const GHCR_REPO = "ghcr.io/hertzg/rtl_433_docker";
+const DOCKER_HUB_REPOS = ["hertzg/rtl433", "hertzg/rtl_433"];
+const REPOS = [...DOCKER_HUB_REPOS, GHCR_REPO];
 
 const MAX_RELEASE_VERSIONS = 3;
 
@@ -80,13 +78,18 @@ const platformToRunner = (platform: string) => {
   return "ubuntu-24.04";
 };
 
-// Generate manifest create command for a tag across all platforms
-const generateManifestCmd = (repo: string, tag: string, platforms: string[]): string => {
-  const manifest = `${repo}:${tag}`;
+// Generate GHCR manifest create command for a tag across all platforms
+const generateGhcrManifestCmd = (tag: string, platforms: string[]): string => {
+  const manifest = `${GHCR_REPO}:${tag}`;
   const platformImages = platforms.map((p) => `${manifest}-${tagify(p)}`).join(" ");
   return `docker buildx imagetools create -t ${manifest} ${platformImages}`;
 };
 
+// Generate skopeo copy command to copy from GHCR to Docker Hub
+const generateSkopeoCopyCmd = (tag: string, destRepo: string): string => {
+  return `skopeo copy --all docker://${GHCR_REPO}:${tag} docker://${destRepo}:${tag}`;
+};
+
 interface GroupData {
   tasks: TaskGroupEntry[];
   originalTask: BuildTask;
@@ -119,15 +122,21 @@ for (const task of tasks) {
 }
 
 const groupEntries = Object.entries(groups).map(([key, { tasks, originalTask }]) => {
-  // Generate all manifest commands for this group (all repos × all tags)
-  const manifestCmds = REPOS.flatMap((repo) =>
-    originalTask.tags.map((tag) => generateManifestCmd(repo, tag, originalTask.platforms))
+  // Step 1: Create manifests on GHCR (no rate limits)
+  const ghcrManifestCmds = originalTask.tags
+    .map((tag) => generateGhcrManifestCmd(tag, originalTask.platforms))
+    .join("\n");
+
+  // Step 2: Copy from GHCR to Docker Hub repos using skopeo
+  const skopeoCopyCmds = DOCKER_HUB_REPOS.flatMap((repo) =>
+    originalTask.tags.map((tag) => generateSkopeoCopyCmd(tag, repo))
   ).join("\n");
 
   return {
     name: key,
     tasks,
-    manifestCmds,
+    ghcrManifestCmds,
+    skopeoCopyCmds,
   };
 });
 setOutput("matrix", groupEntries);