Add ac claim for old docker/build-push-action@v3 / current buildx gha cache

[ChristopherHX]

Also resolves a warning for current releases

| ##[group]GitHub Actions runtime token ACs
| ##[warning]Cannot parse GitHub Actions Runtime Token ACs: "undefined" is not valid JSON
| ##[endgroup]
====>
| ##[group]GitHub Actions runtime token ACs
| ##[endgroup]

* this is an error in v3

References in the docker org:

• https://github.com/docker/build-push-action/blob/831ca179d3cf91cf0c90ca465a408fa61e2129a2/src/main.ts#L24
• https://github.com/docker/actions-toolkit/blob/7d8b4dc6694df35a06fae786427672ce27a8c18d/src/github.ts#L61

No known official action of GitHub makes use of this claim.

Current releases throw an error when configure to use actions cache

| ERROR: failed to solve: failed to configure gha cache exporter: invalid token without access controls
| ##[error]buildx failed with: ERROR: failed to solve: failed to configure gha cache exporter: invalid token without access controls

[ChristopherHX]

Hmm https://github.com/moby/buildkit/blob/b7d04a8a5f76fa7b4c9f923be9e6d9d7a80d0def/cache/remotecache/gha/gha.go#L313...

They don't restore the build cache if we use an empty list of scopes.

Investigating

[ChristopherHX]

NOTE for buildx cache to work we need to include the first key in partial key matching https://github.com/nektos/act/blob/934b13a7a126198019800e79fb2ae7fe57a1c2bd/pkg/artifactcache/handler.go#L388

e.g. remove [1:] part

@wolfogre has created that cache server, my own cache implementation in christopherhx/runner.server has the same bug while used by docker buildx

test workflow (push disabled)

on:
  push:
  
jobs:
  docker:
    runs-on: self-hosted
    permissions:
      contents: read
      packages: write
    steps:
    - uses: actions/checkout@v3
    -
      name: Set up QEMU
      uses: docker/setup-qemu-action@v2
    -
      name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v2
    -
    - run: |
        echo "LOWNER<<EOF23" >> $GITHUB_ENV
        echo $(echo "$OWNER" | tr '[:upper:]' '[:lower:]') >> $GITHUB_ENV
        echo "EOF23" >> $GITHUB_ENV        
      shell: bash
      env:
        OWNER: ${{github.repository_owner}}
    -
      name: Build and push
      uses: docker/build-push-action@v5
      with:
        context: .
        file: Dockerfile
        platforms: linux/amd64
        load: true
        cache-from: type=gha
        cache-to: type=gha,mode=max
        tags: test:test

Sample Dockerfile

FROM ubuntu:latest

RUN touch /etc/random.txt

Sample log showing cache has been used

#4 [internal] load .dockerignore
#4 transferring context: 2B done
#4 DONE 0.0s
#5 [1/2] FROM docker.io/library/ubuntu:latest@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da
#5 resolve docker.io/library/ubuntu:latest@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da 0.0s done
#5 DONE 0.0s
#6 importing cache manifest from gha:1704920929739787516
#6 DONE 22.9s
#7 [2/2] RUN touch /etc/random.txt
#7 CACHED

Also pulling the base image now has 0s duration, instead a 30s download from dockerhub

This is planned by me for Gitea 1.23 or later