From 0d75c08f6a4209c391f52fb1fb9bd6421622feb1 Mon Sep 17 00:00:00 2001
From: Eric Coissac <eric@coissac.eu>
Date: Mon, 4 May 2026 15:16:58 +0200
Subject: [PATCH 1/2] ci: enforce strict registry auth and optimize quarto
 builds

Replace the conditional Docker login check with a direct, non-interactive authentication call that fails immediately on invalid credentials. Update comments to clarify skopeo versus Docker credential store behavior. Additionally, add `freeze: auto` to the Quarto configuration to automatically cache code cell outputs, preventing redundant re-computation and optimizing build performance.
---
 start-jupyterhub.sh | 18 ++++++++----------
 web_src/_quarto.yml |  3 +++
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/start-jupyterhub.sh b/start-jupyterhub.sh
index 54193b4..964eb13 100755
--- a/start-jupyterhub.sh
+++ b/start-jupyterhub.sh
@@ -266,17 +266,15 @@ publish_images() {
     version=$(read_version)
 
     # docker buildx --push uses Docker's own credential store, independent of
-    # skopeo. Verify auth early to get a clear error before a long build.
-    echo -e "${BLUE}Checking registry authentication...${NC}"
+    # skopeo. Prompt once before the (long) build so the user isn't surprised
+    # by an auth failure at the very end.
     local registry_host="${REGISTRY%%/*}"
-    if ! docker login "$registry_host" >/dev/null 2>&1; then
-        echo -e "${YELLOW}Not logged in to ${registry_host}. Running docker login...${NC}"
-        docker login "$registry_host" || {
-            echo "Error: authentication to ${registry_host} failed." >&2
-            echo "Run: docker login ${registry_host}" >&2
-            exit 1
-        }
-    fi
+    echo -e "${BLUE}Authenticating to ${registry_host} (required to push)...${NC}"
+    docker login "$registry_host" || {
+        echo "Error: authentication to ${registry_host} failed." >&2
+        echo "Run: docker login ${registry_host}" >&2
+        exit 1
+    }
 
     echo ""
     echo -e "${BLUE}Publishing images (version ${version}) to ${REGISTRY}${NC}"
diff --git a/web_src/_quarto.yml b/web_src/_quarto.yml
index b35cdf8..222469c 100644
--- a/web_src/_quarto.yml
+++ b/web_src/_quarto.yml
@@ -4,6 +4,9 @@ project:
   post-render:
     - scripts/copy-to-web.sh
 
+execute:
+  freeze: auto
+
 format:
   html:
     toc: false
-- 
2.52.0


From 19e9bba3cc8d8e3e9eb00d2683e7d4623a3be62b Mon Sep 17 00:00:00 2001
From: Eric Coissac <eric@coissac.eu>
Date: Tue, 12 May 2026 14:11:20 +0800
Subject: [PATCH 2/2] ???

-- 
2.52.0