Build Images Inside Your Cluster, Without the Docker Socket

The Forgejo pipelines from the last post build container images, and how they do it matters more than it looks. The obvious way, the way a lot of CI still does it, is to mount the host&rsquo;s Docker socket into the build job. That one shortcut hands the job root on the node, and it is exactly the kind of thing you do not want running on a cluster that holds your platform&rsquo;s data. I build…