chore(deps): update quay.io/podman/stable docker tag to v5.7

fix(docker): patch check_config parse_known_args call
- Add sed replacement in Dockerfile to change "args, unknown = parser.parse_known_args(script_args)" to "args, unknown = parser.parse_known_args()" in /usr/src/homeassistant/homeassistant/scripts/check_config.py - Include comment referencing the related Home Assistant PR fix to document the change.
2025-11-21 09:00:28 +00:00 · 2025-11-20 13:47:27 +01:00 · 2025-11-20 13:46:55 +01:00
3 changed files with 96 additions and 81 deletions
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -1,15 +1,9 @@
 ---
-name: publish
+name: build

 on:
  push:
    branches: [ master ]
-  workflow_dispatch:
-    inputs:
-      sha:
-        description: Commit SHA to promote (defaults to dispatch SHA)
-        required: false
-        type: string

 permissions:
  contents: read
@@ -24,7 +18,7 @@ jobs:
    if: github.event_name == 'push'
    runs-on: docker
    container:
-      image: quay.io/podman/stable:v5.4
+      image: quay.io/podman/stable:v5.7
      options: >-
        --privileged
        --security-opt seccomp=unconfined
@@ -101,76 +95,3 @@ jobs:
            --form-string "url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
            -F "message=Workflow failed on ${{ github.repository }}" \
            https://api.pushover.net/1/messages.json
-
-  promote-and-deploy:
-    if: github.event_name == 'workflow_dispatch'
-    runs-on: docker
-    container:
-      image: quay.io/podman/stable:v5.4
-      options: >-
-        --privileged
-        --security-opt seccomp=unconfined
-        --device /dev/fuse
-        --user root
-    env:
-      CONTAINERS_STORAGE_DRIVER: vfs
-      BUILDAH_FORMAT: docker
-      XDG_RUNTIME_DIR: /tmp/run
-      SHA_INPUT: ${{ inputs.sha }}
-    steps:
-      - name: Podman login
-        env:
-          REGISTRY_USERNAME: ${{ secrets.dockerhub_username }}
-          REGISTRY_PASSWORD: ${{ secrets.dockerhub_password }}
-        run: |
-          mkdir -p /var/lib/containers "$XDG_RUNTIME_DIR"
-          echo -n "$REGISTRY_PASSWORD" | podman login --username "$REGISTRY_USERNAME" --password-stdin "$REGISTRY_SERVER"
-      - name: Promote latest from SHA
-        run: |
-          set -euo pipefail
-          SHA_TO_PROMOTE=${SHA_INPUT:-${GITHUB_SHA}}
-          echo "== Promoting ${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE} into production"
-          podman pull "docker://${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE}"
-          podman push "${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE}" "docker://${RELEASE_IMAGE_NAME}:latest"
-      - name: Logout
-        if: always()
-        run: |
-          podman logout "${REGISTRY_SERVER}"
-      - name: Notify via Pushover on failure
-        if: failure()
-        run: |
-          curl -v \
-            -F "token=${{ secrets.PUSHOVER_TOKEN }}" \
-            -F "user=${{ secrets.PUSHOVER_USER }}" \
-            --form-string "title=HomeAssistant Promote Failed" \
-            --form-string "url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
-            -F "message=Workflow failed on ${{ github.repository }}" \
-            https://api.pushover.net/1/messages.json
-
-  deploy:
-    if: github.event_name == 'workflow_dispatch'
-    runs-on: docker
-    needs: promote-and-deploy
-    container:
-      image: bitnami/kubectl
-    steps:
-      - name: Write kubeconfig
-        env:
-          KUBECONFIG_CONTENT: ${{ secrets.kubeconfig }}
-        run: |
-          echo "$KUBECONFIG_CONTENT" > kubeconfig
-      - name: Rollout restart
-        run: |
-          kubectl --kubeconfig=kubeconfig -n ${KUBERNETES_NAMESPACE} rollout restart deployment/hass
-          kubectl --kubeconfig=kubeconfig -n ${KUBERNETES_NAMESPACE} rollout status deployment/hass
-      - name: Notify via Pushover on failure
-        if: failure()
-        run: |
-          curl -v \
-            -F "token=${{ secrets.PUSHOVER_TOKEN }}" \
-            -F "user=${{ secrets.PUSHOVER_USER }}" \
-            --form-string "title=HomeAssistant Deploy Failed" \
-            --form-string "url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
-            -F "message=Workflow failed on ${{ github.repository }}" \
-            https://api.pushover.net/1/messages.json
-
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,91 @@
+---
+name: deploy
+
+on:
+  workflow_dispatch:
+    inputs:
+      sha:
+        description: Commit SHA to promote (defaults to dispatch SHA)
+        required: false
+        type: string
+
+permissions:
+  contents: read
+
+env:
+  REGISTRY_SERVER: docker.io
+  RELEASE_IMAGE_NAME: docker.io/genunix/homeassistant
+  KUBERNETES_NAMESPACE: hass
+
+jobs:
+  promote-and-deploy:
+    if: github.event_name == 'workflow_dispatch'
+    runs-on: docker
+    container:
+      image: quay.io/podman/stable:v5.7
+      options: >-
+        --privileged
+        --security-opt seccomp=unconfined
+        --device /dev/fuse
+        --user root
+    env:
+      CONTAINERS_STORAGE_DRIVER: vfs
+      BUILDAH_FORMAT: docker
+      XDG_RUNTIME_DIR: /tmp/run
+      SHA_INPUT: ${{ inputs.sha }}
+    steps:
+      - name: Podman login
+        env:
+          REGISTRY_USERNAME: ${{ secrets.dockerhub_username }}
+          REGISTRY_PASSWORD: ${{ secrets.dockerhub_password }}
+        run: |
+          mkdir -p /var/lib/containers "$XDG_RUNTIME_DIR"
+          echo -n "$REGISTRY_PASSWORD" | podman login --username "$REGISTRY_USERNAME" --password-stdin "$REGISTRY_SERVER"
+      - name: Promote latest from SHA
+        run: |
+          set -euo pipefail
+          SHA_TO_PROMOTE=${SHA_INPUT:-${GITHUB_SHA}}
+          echo "== Promoting ${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE} into production"
+          podman pull "docker://${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE}"
+          podman push "${RELEASE_IMAGE_NAME}:${SHA_TO_PROMOTE}" "docker://${RELEASE_IMAGE_NAME}:latest"
+      - name: Logout
+        if: always()
+        run: |
+          podman logout "${REGISTRY_SERVER}"
+      - name: Notify via Pushover on failure
+        if: failure()
+        run: |
+          curl -v \
+            -F "token=${{ secrets.PUSHOVER_TOKEN }}" \
+            -F "user=${{ secrets.PUSHOVER_USER }}" \
+            --form-string "title=HomeAssistant Promote Failed" \
+            --form-string "url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
+            -F "message=Workflow failed on ${{ github.repository }}" \
+            https://api.pushover.net/1/messages.json
+
+  deploy:
+    if: github.event_name == 'workflow_dispatch'
+    runs-on: docker
+    needs: promote-and-deploy
+    container:
+      image: bitnami/kubectl
+    steps:
+      - name: Write kubeconfig
+        env:
+          KUBECONFIG_CONTENT: ${{ secrets.kubeconfig }}
+        run: |
+          echo "$KUBECONFIG_CONTENT" > kubeconfig
+      - name: Rollout restart
+        run: |
+          kubectl --kubeconfig=kubeconfig -n ${KUBERNETES_NAMESPACE} rollout restart deployment/hass
+          kubectl --kubeconfig=kubeconfig -n ${KUBERNETES_NAMESPACE} rollout status deployment/hass
+      - name: Notify via Pushover on failure
+        if: failure()
+        run: |
+          curl -v \
+            -F "token=${{ secrets.PUSHOVER_TOKEN }}" \
+            -F "user=${{ secrets.PUSHOVER_USER }}" \
+            --form-string "title=HomeAssistant Deploy Failed" \
+            --form-string "url=${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
+            -F "message=Workflow failed on ${{ github.repository }}" \
+            https://api.pushover.net/1/messages.json
--- a/3
+++ b/3
@@ -10,6 +10,9 @@ RUN mkdir -p /usr/local/config/custom_components && \
    wget -q -O - https://install.hacs.xyz | bash - && \
    cat /usr/local/config/custom_components/hacs/manifest.json | jq -r .requirements[] | xargs /usr/local/bin/python3 -m pip install --quiet --no-cache-dir --upgrade --constraint /usr/src/homeassistant/homeassistant/package_constraints.txt --find-links https://wheels.home-assistant.io/musllinux/ --prefer-binary

+# NOTE: Fix https://github.com/home-assistant/core/pull/155885
+RUN sed -i 's/args, unknown = parser.parse_known_args(script_args)/args, unknown = parser.parse_known_args()/g' /usr/src/homeassistant/homeassistant/scripts/check_config.py
+
 ADD entrypoint.sh /entrypoint.sh

 ENV PYTHONUSERBASE /config/deps