Push Synapse docker images to Element OCI Registry by devonh · Pull Request #19420 · element-hq/synapse

devonh · 2026-01-30T20:19:32Z

Part of https://github.com/element-hq/serverproduct-internal/issues/1153

Pushes Synapse docker images to the Element OCI Registry in addition to the dockerhub and ghcr registries.

Ready for review despite Draft status. See #19420 (comment)

Pull Request Checklist

Pull request is based on the develop branch
Pull request includes a changelog file. The entry should:
- Be a short description of your change which makes sense to users. "Fixed a bug that prevented receiving messages from other servers." instead of "Moved X method from EventStore to EventWorkerStore.".
- Use markdown where necessary, mostly for code blocks.
- End with either a period (.) or an exclamation mark (!).
- Start with a capital letter.
- Feel free to credit yourself, by adding a sentence "Contributed by @github_username." or "Contributed by [Your Name]." to the end of the entry.
Code style is correct (run the linters)

devonh · 2026-01-30T21:33:07Z

I manually kicked off the workflow to test but it is failing: https://github.com/element-hq/synapse/actions/runs/21529909621/job/62042989980

This shouldn't be merged until that is passing.

MadLittleMods · 2026-01-30T23:10:19Z

.github/workflows/docker.yml

+      - name: Tailscale
+        uses: tailscale/github-action@53acf823325fe9ca47f4cdaa951f90b4b0de5bb9 # v4.1.1
+        with:
+          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
+          audience: ${{ secrets.TS_AUDIENCE }}
+          tags: tag:github-actions


I manually kicked off the workflow to test but it is failing: https://github.com/element-hq/synapse/actions/runs/21529909621/job/62042989980

Is that expected? Should it pass before we merge?

It's failing with:

Error: Please provide either an auth key, OAuth secret and tags, or federated identity client ID and audience with tags.

Are the TS_OAUTH_CLIENT_ID/TS_AUDIENCE variables/secrets filled in?

I don't think it should be failing.
Yes we should wait for it to pass before merging.

I just followed the steps outlined in the linked issue (which is to literally copy paste what's in this PR).
So I'm guessing there are secrets missing at some layer. Those secrets aren't visible to me in the repo settings, so maybe some steps to obtain and add them are missing.

MadLittleMods · 2026-01-30T23:11:25Z

.github/workflows/docker.yml

+      - name: Login to Element OCI Registry
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        with:
+          registry: oci-push.vpn.infra.element.io
+          username: ${{ steps.import-secrets.outputs.OCI_USERNAME }}
+          password: ${{ steps.import-secrets.outputs.OCI_PASSWORD }}


Are these workflows based on us doing the same thing somewhere else?

It's all based on workflow provided by SRE in our handbook: https://handbook.element.io/books/backend-team/page/testing-libraries-utilities-github-actions-deployments-and-packaging#bkmrk-push-to-oci.element.

MadLittleMods · 2026-01-30T23:17:02Z

.github/workflows/docker.yml

+             services/backend-repositories/secret/data/oci.element.io username | OCI_USERNAME ;
+             services/backend-repositories/secret/data/oci.element.io password | OCI_PASSWORD ;
+
+      - name: Login to Element OCI Registry


For my own reference, what does OCI stand for? Open Container Initiative?

I understand oci.element.io (docs) is our own container/image registry.

Yep, registry.element.io was already taken by our private registry

devonh · 2026-02-04T17:48:42Z

Dropping this to Draft status until the docker build workflow is passing.

Despite the workflow failing, this PR is ready for review as-is. The failure is due to missing credentials/permissions.
The changes follow the template provided in the docs associated with the linked issue docs.

sandhose · 2026-02-17T13:32:40Z

This works now: https://github.com/element-hq/synapse/actions/runs/22099132763

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [element-hq/synapse](https://github.com/element-hq/synapse) | minor | `v1.147.1` → `v1.148.0` | --- ### Release Notes <details> <summary>element-hq/synapse (element-hq/synapse)</summary> ### [`v1.148.0`](https://github.com/element-hq/synapse/releases/tag/v1.148.0) [Compare Source](element-hq/synapse@v1.147.1...v1.148.0) ### Synapse 1.148.0 (2026-02-24) No significant changes since 1.148.0rc1. ### Synapse 1.148.0rc1 (2026-02-17) #### Features - Support sending and receiving [MSC4354 Sticky Event](matrix-org/matrix-spec-proposals#4354) metadata. ([#19365](element-hq/synapse#19365)) #### Improved Documentation - Fix reference to the `experimental_features` section of the configuration manual documentation. ([#19435](element-hq/synapse#19435)) #### Deprecations and Removals - Remove support for [MSC3244: Room version capabilities](matrix-org/matrix-spec-proposals#3244) as the MSC was rejected. ([#19429](element-hq/synapse#19429)) #### Internal Changes - Add in-repo Complement tests so we can test Synapse specific behavior at an end-to-end level. ([#19406](element-hq/synapse#19406)) - Push Synapse docker images to Element OCI Registry. ([#19420](element-hq/synapse#19420)) - Allow configuring the Rust HTTP client to use HTTP/2 only. ([#19457](element-hq/synapse#19457)) - Correctly refuse to start if the Rust workspace config has changed and the Rust library has not been rebuilt. ([#19470](element-hq/synapse#19470)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4203 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

Push Synapse docker images to Element OCI Registry

23758ae

devonh requested a review from a team as a code owner January 30, 2026 20:19

Add changelog entry

f66129b

MadLittleMods reviewed Jan 30, 2026

View reviewed changes

devonh marked this pull request as draft February 4, 2026 17:48

MadLittleMods requested a review from a team February 5, 2026 21:13

MadLittleMods requested review from sandhose and removed request for a team February 16, 2026 23:20

Merge branch 'develop' into devon/element-docker

4715ae0

sandhose marked this pull request as ready for review February 17, 2026 13:31

sandhose approved these changes Feb 17, 2026

View reviewed changes

sandhose merged commit 69b931f into develop Feb 17, 2026
43 of 44 checks passed

sandhose deleted the devon/element-docker branch February 17, 2026 13:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Push Synapse docker images to Element OCI Registry#19420

Push Synapse docker images to Element OCI Registry#19420
sandhose merged 3 commits intodevelopfrom
devon/element-docker

devonh commented Jan 30, 2026 •

edited

Loading

Uh oh!

devonh commented Jan 30, 2026 •

edited

Loading

Uh oh!

MadLittleMods Jan 30, 2026 •

edited

Loading

Uh oh!

devonh Jan 30, 2026

Uh oh!

devonh Jan 30, 2026

Uh oh!

MadLittleMods Jan 30, 2026

Uh oh!

sandhose Feb 17, 2026 •

edited

Loading

Uh oh!

MadLittleMods Jan 30, 2026

Uh oh!

sandhose Feb 17, 2026

Uh oh!

devonh commented Feb 4, 2026 •

edited

Loading

Uh oh!

sandhose commented Feb 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

devonh commented Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Pull Request Checklist

Uh oh!

devonh commented Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

MadLittleMods Jan 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

devonh Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

devonh Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

MadLittleMods Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

sandhose Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

MadLittleMods Jan 30, 2026

Choose a reason for hiding this comment

Uh oh!

sandhose Feb 17, 2026

Choose a reason for hiding this comment

Uh oh!

devonh commented Feb 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

sandhose commented Feb 17, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

devonh commented Jan 30, 2026 •

edited

Loading

devonh commented Jan 30, 2026 •

edited

Loading

MadLittleMods Jan 30, 2026 •

edited

Loading

sandhose Feb 17, 2026 •

edited

Loading

devonh commented Feb 4, 2026 •

edited

Loading