chore: remove unnecessary cache config (NVIDIA#54)

Author: drew

.github/workflows/ci-image.yml

@@ -39,8 +39,6 @@ jobs:
         run: |
           docker buildx build \
             --platform linux/amd64,linux/arm64 \
-            --cache-from type=registry,ref=${{ env.CI_IMAGE }}:buildcache \
-            --cache-to type=registry,ref=${{ env.CI_IMAGE }}:buildcache,mode=max \
             --build-arg MISE_GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }} \
             --push \
             -t ${{ env.CI_IMAGE }}:${{ github.sha }} \

.github/workflows/docker-build.yml

@@ -20,7 +20,6 @@ on:
 
 env:
   MISE_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  GHCR_CACHE: ghcr.io/nvidia/nv-agent-env/cache
 
 permissions:
   contents: read
@@ -55,6 +54,4 @@ jobs:
       - name: Build ${{ inputs.component }} image
         env:
           DOCKER_BUILDER: navigator
-          DOCKER_CACHE_FROM: "type=registry,ref=${{ env.GHCR_CACHE }}/${{ inputs.component }}:buildcache"
-          DOCKER_CACHE_TO: "type=registry,ref=${{ env.GHCR_CACHE }}/${{ inputs.component }}:buildcache,mode=max"
         run: mise run --no-prepare docker:build:${{ inputs.component }}

architecture/build-containers.md

@@ -393,10 +393,9 @@ Container builds use Docker BuildKit with local cache directories:
 
 In CI pipelines:
 
-- `.cache/buildkit/` is cached between pipeline runs to avoid recompiling unchanged Rust dependencies.
+- Remote BuildKit daemons (`buildkit-amd64` and `buildkit-arm64`) are used as persistent builders via `driver: remote`. Their built-in layer cache persists across builds, so no external cache (registry-backed or otherwise) is needed in CI.
 - Rust lint/test jobs cache `.cache/sccache/` and `target/` with keys derived from `Cargo.lock` and Rust task config files, scoped per runner architecture.
 - CI sets `CARGO_INCREMENTAL=0` to favor deterministic clean builds over incremental metadata churn.
-- The `build_ci_image` job publishes a registry-backed BuildKit cache at `$CI_REGISTRY_IMAGE/ci:buildcache` so layer cache survives across runners and pipelines even when local cache directories are cold.
 - Publish jobs mirror `crazymax/osxcross:latest` into `$CI_REGISTRY_IMAGE/third_party/osxcross:latest` (when missing) and set `OSXCROSS_IMAGE` so macOS wheel Docker builds consume the mirrored image instead of pulling from Docker Hub on each run.
 - The sandbox e2e test job tags and pushes component images to the GitLab project registry (`$CI_REGISTRY_IMAGE`) and configures cluster bootstrap to pull from that remote registry with CI credentials.
 

build/scripts/docker-build-cluster.sh

@@ -7,8 +7,6 @@
 
 #   DOCKER_PLATFORM          - Target platform (optional)
 #   DOCKER_BUILDER           - Buildx builder name (default: auto-select)
-#   DOCKER_CACHE_FROM        - Explicit --cache-from value (e.g. type=registry,ref=...)
-#   DOCKER_CACHE_TO          - Explicit --cache-to value (e.g. type=registry,ref=...,mode=max)
 #   DOCKER_PUSH              - When set to "1", push instead of loading into local daemon
 #   IMAGE_REGISTRY           - Registry prefix for image name (e.g. ghcr.io/org/repo)
 set -euo pipefail
@@ -34,11 +32,7 @@ elif [[ -z "${DOCKER_PLATFORM:-}" && -z "${CI:-}" ]]; then
 fi
 
 CACHE_ARGS=()
-if [[ -n "${DOCKER_CACHE_FROM:-}" || -n "${DOCKER_CACHE_TO:-}" ]]; then
-  # Explicit cache configuration from the caller (e.g. CI registry cache).
-  [[ -n "${DOCKER_CACHE_FROM:-}" ]] && CACHE_ARGS+=(--cache-from "${DOCKER_CACHE_FROM}")
-  [[ -n "${DOCKER_CACHE_TO:-}" ]]   && CACHE_ARGS+=(--cache-to "${DOCKER_CACHE_TO}")
-elif [[ -z "${CI:-}" ]]; then
+if [[ -z "${CI:-}" ]]; then
   # Local development: use filesystem cache with docker-container driver.
   if docker buildx inspect ${BUILDER_ARGS[@]+"${BUILDER_ARGS[@]}"} 2>/dev/null | grep -q "Driver: docker-container"; then
     CACHE_ARGS=(

build/scripts/docker-build-component.sh

@@ -14,8 +14,6 @@
 #   IMAGE_TAG          - Image tag (default: dev)
 #   DOCKER_PLATFORM    - Target platform (optional, e.g. linux/amd64)
 #   DOCKER_BUILDER     - Buildx builder name (default: auto-select)
-#   DOCKER_CACHE_FROM  - Explicit --cache-from value (e.g. type=registry,ref=...)
-#   DOCKER_CACHE_TO    - Explicit --cache-to value (e.g. type=registry,ref=...,mode=max)
 #   DOCKER_PUSH        - When set to "1", push instead of loading into local daemon
 #   IMAGE_REGISTRY     - Registry prefix for image name (e.g. ghcr.io/org/repo)
 set -euo pipefail
@@ -80,11 +78,7 @@ elif [[ -z "${DOCKER_PLATFORM:-}" && -z "${CI:-}" ]]; then
 fi
 
 CACHE_ARGS=()
-if [[ -n "${DOCKER_CACHE_FROM:-}" || -n "${DOCKER_CACHE_TO:-}" ]]; then
-  # Explicit cache configuration from the caller (e.g. CI registry cache).
-  [[ -n "${DOCKER_CACHE_FROM:-}" ]] && CACHE_ARGS+=(--cache-from "${DOCKER_CACHE_FROM}")
-  [[ -n "${DOCKER_CACHE_TO:-}" ]]   && CACHE_ARGS+=(--cache-to "${DOCKER_CACHE_TO}")
-elif [[ -z "${CI:-}" ]]; then
+if [[ -z "${CI:-}" ]]; then
   # Local development: use filesystem cache with docker-container driver.
   if docker buildx inspect ${BUILDER_ARGS[@]+"${BUILDER_ARGS[@]}"} 2>/dev/null | grep -q "Driver: docker-container"; then
     CACHE_ARGS=(

build/scripts/docker-publish-multiarch.sh

@@ -129,8 +129,6 @@ for component in sandbox server; do
     --platform "${PLATFORMS}" \
     -f "${DOCKERFILE}" \
     -t "${FULL_IMAGE}:${IMAGE_TAG}" \
-    --cache-from "type=registry,ref=${FULL_IMAGE}:buildcache" \
-    --cache-to "type=registry,ref=${FULL_IMAGE}:buildcache,mode=max" \
     ${EXTRA_BUILD_FLAGS} \
     ${BUILD_ARGS} \
     --push \
@@ -157,8 +155,6 @@ docker buildx build \
   -f deploy/docker/Dockerfile.cluster \
   -t "${CLUSTER_IMAGE}:${IMAGE_TAG}" \
   --build-arg K3S_VERSION=${K3S_VERSION} \
-  --cache-from "type=registry,ref=${CLUSTER_IMAGE}:buildcache" \
-  --cache-to "type=registry,ref=${CLUSTER_IMAGE}:buildcache,mode=max" \
   ${EXTRA_BUILD_FLAGS} \
   --push \
   .