[Gerrrt]

What changed

scripts/check_gosu_skip.sh now retries an image pull when the registry answers toomanyrequests, after 5, 20 and 60 seconds (the pauses check_compose_health.py already uses, #602). Any other pull failure still fails at once.

Why

ghcr.io throttles shared CI runners, and this check pulled once. The resulting red "Validate configs" hit main at 4eeeffa and ce42629, and #1243. A red tip makes converge.sh refuse to deploy, so both hosts' converge timers stopped and ScheduledJobStale fired on trinity for commits that were fine.

Blast radius

CI and make validate only. At most 85 s more on a throttled run; no change when the registry answers.

• No change to network segmentation or firewall rules
• No new port published to a VLAN that could not already reach the service
• No credential added outside secrets/*.sops.yaml

Verification

• ./scripts/check_gosu_skip.sh on trinity: OK, 3 pinned images.

• pull_with_retry against a fake docker:

  • throttled twice, then served: passes on try 3;
  • manifest unknown: fails on try 1;
  • always throttled: gives up after 4 tries.

• shellcheck: clean.

• make validate passes — the touched check was run on its own, plus shellcheck

• Deployed to the lab and confirmed working — CI-only change

• Docs updated (docs/, service README, or docs/roadmap.md) — nothing to update

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

The narrowly scoped retry logic preserves failure handling, and isolated verification confirmed its retry bounds and success and failure paths.

No open issues 🎉

What changed in this PR

Adds bounded retries to the gosu-skip image check to reduce CI failures caused by registry throttling, which can block deployment convergence.

Changes:

• Retries toomanyrequests pull failures after 5, 20, and 60 seconds.
• Preserves immediate failure for other pull errors and reports the final error when retries are exhausted.

File	Description
scripts/​check_gosu_skip.sh	Adds a throttling-aware pull helper and uses it in the image-check loop.

_{Review effort: Balanced}