Running image builds on a schedule makes sense for security – you want your bootc images to pick up the latest Fedora updates automatically. But scheduling a daily build that rebuilds every image every day, even when nothing upstream changed, wastes runner time and fills the registry with identical layers.

This post covers how I added upstream change detection to my Forgejo CI pipelines for gorgeOS, so that scheduled builds are truly no-ops when the upstream image hasn’t moved.

Running a Fedora-based bootc image stack means tracking multiple Fedora releases in parallel. Instead of duplicating every job in the workflow, I wired up the matrix strategy in Forgejo Actions to build F43 and F44 from a single job definition.

The Problem With Hardcoded Versions

Before, every Containerfile had a hardcoded base image:

FROM git.m1ch.eu/oci/c-os:base-43

Supporting F44 would have meant either duplicating the whole workflow or a manual find-and-replace for every release. Neither scales.