Add private registry support for Dockerfile image build

[iQQBot]

Description

Add private registry support for Dockerfile image build

Summary generated by Copilot

🤖 Generated by Copilot at a1bfd46

This pull request adds support for ECR registries as mirrors for image building, by introducing changes to the proxy, auth, and orchestrator packages, and by using a custom buildkit image with a patched containerd. This feature allows users to specify ECR registries as sources for their workspace images, and improves the performance and reliability of image building.

Related Issue(s)

Fixes PRD-111

How to test

Documentation

Preview status

Gitpod was successfully deployed to your preview environment.

• 🏷️ Name - pd-private0a4bb2d004
• 🔗 URL - pd-private0a4bb2d004.preview.gitpod-dev.com/workspaces.
• 📚 Documentation - See our internal documentation for information on how to interact with your preview environment.
• 📦 Version - pd-private-docker-mirror-gha.17323
• 🗒️ Logs - GCP Logs Explorer

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[easyCZ]

Looks good. Do we have a way to extend the unit tests to show the logic exhibits the desired behaviour? If so, could you try to add them, please?

[iQQBot]

Looks good. Do we have a way to extend the unit tests to show the logic exhibits the desired behaviour? If so, could you try to add them, please?

I haven't found a suitable way to add unit tests, on one hand this requires a patched version for buildkitd and also a registry server, plus these are still dependent on the domain name for forwarding, which makes the whole thing very complicated, I'm leaning towards merging this PR for now, and if I have the time I may add unit tests in another PR.

[iQQBot]

/unhold

[ChevronTango]

Does this PR make the work in #18604 redundant?

[corneliusludmann]

Hey @ChevronTango! Indeed, it seems that your work is covered by this PR as well. Do you need any help to test whether it solves your use case?