From 487f48e6e297840de0bd72f73603ddfd38c3ecbc Mon Sep 17 00:00:00 2001
From: satriadhikara <84092642+satriadhikara@users.noreply.github.com>
Date: Mon, 12 Oct 2026 18:54:07 +0700
Subject: [PATCH] fix: build compose images without host networking

build.network: host was set on 9 services but no Dockerfile needs host
networking: every build step only fetches packages (Maven, pip/pipenv, apk,
bun), which works on the default build network. The release compose file
(.docker/docker-compose.yml) never used it.

Since Compose 2.37.0 builds go through buildx bake, where network: host is an
entitlement that must be granted with --allow=network.host, and Compose never
passes it. Buildx < 0.37.2 skipped that check under --progress=rawjson, which
hid the problem. Buildx 0.37.2 (GHSA-gwr2-q96m-6682) enforces it, so every
docker compose build of these services fails on current GitHub runners and on
any local setup with Buildx >= 0.37.2.
---
 docker-compose.yml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 5a558a602..e2c31985e 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -145,7 +145,6 @@ services:
       - 9099:8080
     build:
       context: ./dbrepo-metadata-service
-      network: host
     environment:
       ADMIN_EMAIL: "${ADMIN_EMAIL:-noreply@localhost}"
       AUTH_SERVICE_ADMIN: ${AUTH_SERVICE_ADMIN:-admin}
@@ -214,7 +213,6 @@ services:
     image: dbrepo-consumer-service:latest
     build:
       context: ./dbrepo-consumer-service
-      network: host
     environment:
       AUTH_SERVICE_ADMIN: ${AUTH_SERVICE_ADMIN:-admin}
       AUTH_SERVICE_ADMIN_PASSWORD: ${AUTH_SERVICE_ADMIN_PASSWORD:-admin}
@@ -318,7 +316,6 @@ services:
     image: dbrepo-search-service:latest
     build:
       context: ./dbrepo-search-service
-      network: host
     environment:
       AUTH_SERVICE_CLIENT: ${AUTH_SERVICE_CLIENT:-dbrepo-client}
       AUTH_SERVICE_CLIENT_SECRET: ${AUTH_SERVICE_CLIENT_SECRET:-MUwRc7yfXSJwX8AdRMWaQC3Nep1VjwgG}
@@ -346,7 +343,6 @@ services:
       args:
         APP_VERSION: ${APP_VERSION:-latest}
         COMMIT: ${CI_COMMIT_SHORT_SHA:-}
-      network: host
     environment:
       NUXT_STORAGE_OIDC_HOST: "${CACHE_DB_HOST:-cache-db}"
       NUXT_STORAGE_OIDC_USERNAME: "${CACHE_DB_USERNAME:-default}"
@@ -440,7 +436,6 @@ services:
     build:
       context: ./dbrepo-search-service
       dockerfile: init.Dockerfile
-      network: host
     environment:
       LOG_APPLICATION_LEVEL: ${LOG_APPLICATION_LEVEL:-info}
       METADATA_SERVICE_ENDPOINT: ${METADATA_SERVICE_ENDPOINT:-http://metadata-service:8080}
@@ -464,7 +459,6 @@ services:
     build:
       context: ./dbrepo-dashboard-service
       dockerfile: init.Dockerfile
-      network: host
     environment:
       LOG_APPLICATION_LEVEL: ${LOG_APPLICATION_LEVEL:-info}
       DASHBOARD_UI_ENDPOINT: "${DASHBOARD_UI_ENDPOINT:-http://dashboard-ui:3000}"
@@ -506,7 +500,6 @@ services:
     image: dbrepo-storage-service-init:latest
     build:
       context: ./dbrepo-storage-service/init
-      network: host
     environment:
       S3_BUCKET: "${S3_BUCKET:-dbrepo}"
       S3_ACCESS_KEY_ID: "${S3_ADMIN_ACCESS_KEY_ID:-seaweedfsadmin}"
@@ -525,7 +518,6 @@ services:
     image: dbrepo-data-service:latest
     build:
       context: ./dbrepo-data-service
-      network: host
     environment:
       AUTH_SERVICE_ADMIN: ${AUTH_SERVICE_ADMIN:-admin}
       AUTH_SERVICE_ADMIN_PASSWORD: ${AUTH_SERVICE_ADMIN_PASSWORD:-admin}
@@ -612,7 +604,6 @@ services:
     image: dbrepo-dashboard-service:latest
     build:
       context: ./dbrepo-dashboard-service
-      network: host
     environment:
       AUTH_SERVICE_ENDPOINT: ${AUTH_SERVICE_ENDPOINT:-http://auth-service:8080}
       BASE_URL: "${BASE_URL:-http://localhost}"