better use of cicd

Author: lacraig2

.github/workflows/publish_docker.yml

@@ -25,25 +25,58 @@ jobs:
           tag_prefix: panda
           release_branch: main
           use_api: true
+
+      - name: Trust Harbor's self-signed certificate
+        run: |
+          echo "Fetching certificate from registry"
+          openssl s_client -showcerts -connect ${{ secrets.PANDA_ARC_REGISTRY }}:443 < /dev/null 2>/dev/null | openssl x509 -outform PEM | sudo tee /usr/local/share/ca-certificates/harbor.crt > /dev/null
+          sudo update-ca-certificates
+          
+      - name: Log in to Rehosting Arc Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ secrets.PANDA_ARC_REGISTRY }}
+          username: ${{ secrets.PANDA_ARC_REGISTRY_USER }}
+          password: ${{ secrets.PANDA_ARC_REGISTRY_PASSWORD }}
+      
+      - name: Install dependencies and label git workspace safe
+        run: |
+          sudo apt-get update
+          sudo apt-get -y install git curl jq gzip tmux
+          git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          driver-opts: |
+            image=moby/buildkit:master
+            network=host
+          buildkitd-config-inline: |
+            [registry."${{ secrets.PANDA_ARC_REGISTRY }}"]
+              insecure = true
+              http = true
       
       - name: 'Login to Docker Registry'
         uses: docker/login-action@v3
         with:
           username: pandare
           password: ${{secrets.pandare_dockerhub}}
 
-      - name: Pull latest
-        run: docker pull pandare/panda-ng:latest || true
-      
-      - name: Build panda:latest
-        uses: docker/build-push-action@v6.13.0
+      - name: Build Docker image and push to Dockerhub
+        uses: docker/build-push-action@v6.18.0
         with:
-          push: true
           context: ${{ github.workspace }}
+          push: true
+          cache-from: |
+            type=registry,ref=${{secrets.PANDA_ARC_REGISTRY}}/library/panda-ng:cache,mode=max
+          cache-to: |
+            type=registry,ref=${{secrets.PANDA_ARC_REGISTRY}}/library/panda-ng:cache,mode=max
           tags: |
             pandare/panda-ng:${{ github.sha }}
             pandare/panda-ng:${{ steps.version.outputs.prefixed-v-version }}
             pandare/panda-ng:latest
+          build-args: |
+            REGISTRY=${{ secrets.PANDA_ARC_REGISTRY }}/proxy
       
       - name: Build package
         working-directory: panda/debian