generated from coulomb/repo-seed
Gitea's registry token realm is misconfigured — it points to gitea.coulomb.social:80 but Gitea only listens on port 32166. iptables is not available on haskelseed (Alpine). Workaround: pre-fetch the bearer token via curl against port 32166 and pass it to skopeo with --dest-registry-token, bypassing the broken token service URL entirely. Validated with inter-hub:11ff61c on 2026-05-02. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>