switch to kaniko

.gitlab-ci.yml

-.build-docs-base:
-  image: node:lts-alpine3.20
-  services:
-    - name: docker:19-dind
-  before_script:
-    - apk add --no-cache git docker-cli jq curl
-    - npm ci
-    - npm run build
-    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
-    - docker build --pull -t "$CI_REGISTRY_IMAGE" .
+stages:
+  - build
+
+variables:
+  USE_AS_LATEST: "true"
 
-build-docs-master:
+.build:
+  image: gcr.io/kaniko-project/executor:debug
   stage: build
-  extends: .build-docs-base
   script:
-    - docker tag "$CI_REGISTRY_IMAGE" "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHA"
-    - docker push "$CI_REGISTRY_IMAGE:$CI_COMMIT_SHA"
-    - docker push "$CI_REGISTRY_IMAGE"
+    - mkdir -p /kaniko/.docker
+    - mount -t tmpfs none /kaniko/.docker
+    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"auth\":\"$(echo -n ${CI_REGISTRY_USER}:${CI_REGISTRY_PASSWORD} | base64)\"}}}" > /kaniko/.docker/config.json
+    - /kaniko/executor --force --use-new-run --cache=true --cache-repo "$CI_REGISTRY_IMAGE/build-cache" --registry-mirror docker-io.registry-cache.kube.stuvus.de --context . --dockerfile Dockerfile --destination $DESTINATION
+
+
+build-main:
+  extends: .build
+  before_script:
+    - export DESTINATION="$CI_REGISTRY_IMAGE"
   only:
     - master
 
-build-docs:
-  stage: build
-  extends: .build-docs-base
-  script:
-    - docker tag "$CI_REGISTRY_IMAGE" "$CI_REGISTRY_IMAGE:branch-$CI_COMMIT_REF_SLUG"
-    - docker push "$CI_REGISTRY_IMAGE:branch-$CI_COMMIT_REF_SLUG"
+build:
+  extends: .build
+  before_script:
+    - export DESTINATION="$CI_REGISTRY_IMAGE:branch-$CI_COMMIT_REF_SLUG"
   except:
     - master
-

Dockerfile

+FROM node:lts-alpine3.20
+COPY ./ ./
+RUN npm ci
+RUN npm run build
+
 FROM nginxinc/nginx-unprivileged:alpine
 USER root
 RUN rm -rf /usr/share/nginx/html
-COPY ./dist /usr/share/nginx/html
+COPY --from=0 ./dist /usr/share/nginx/html
 USER 101