When set, --strict rejects builds/pushes where the working tree is
dirty or HEAD is not exactly on a git tag. Ensures image tags in
the registry always match clean git tags.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Build already creates both :latest and :<version> tags, but push
only pushed :latest. Now push detects the version via git describe
and pushes both tags, giving the registry version history.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Single Go binary with five commands:
- build: podman build locally with registry tags + git version
- push: podman push to MCR
- deploy: SSH pull/stop/rm/run on target node
- cert renew: issue TLS cert from Metacrypt via REST API
- status: show container status on a node
Config-driven via TOML service registry describing images,
Dockerfiles, container configs per node. Shells out to podman
for container operations and ssh for remote access.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
