ci docker build fails to push to ghcr

[haochenx]

example: https://github.com/kxcinc/pubinfra.dockerfiles/actions/runs/5502192987/jobs/10026365723

#16 exporting to image
#16 exporting layers
#16 exporting layers 61.2s done
#16 exporting manifest sha256:60bfb82e8b1cb17c49fe032ecedd2a77b2da40dee6d82049522adddc76ec9029 done
#16 exporting config sha256:81333894f48a3e4979c34af408365ba6cdfdd9c7da3322f8b6a5f57f1a47eac9 done
#16 exporting attestation manifest sha256:a34a175078fafa1abe2f8afdf80ab75f591c00b0a5a7b3e81cda5f8e2c027c93 done
#16 exporting manifest list sha256:b8e73413148a943a066413e95112b6c0bf52fa275e2b8cac5d919c24094c1722 done
#16 pushing layers
#16 ...

#17 [auth] kxcinc/ocaml-general:pull,push token for ghcr.io
#17 DONE 0.0s

#16 exporting to image
#16 62.15 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/f8819230-910f-4445-96af-7a3530b8adb4?digest=sha256%3A153d788c40ad6a6f5066ceae8bcd8154f29b8ca3b758c8fff080d2b0aba738da": write tcp 172.17.0.2:56588->140.82.113.34:443: write: connection reset by peer
#16 62.15 retrying in 1s
#16 62.56 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/c49dd6ec-f116-4189-ae17-db39d8c99084?digest=sha256%3A14338e13dd953879318f0b16120454f671d68bc9b4393a6fb5562c2bc1c1e273": write tcp 172.17.0.2:56574->140.82.113.34:443: write: connection reset by peer
#16 62.56 retrying in 1s
#16 62.94 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/1fec9bcf-d2c9-4152-bd46-b8b1e59450d7?digest=sha256%3Ae60daa733da2a8c874aa1f20a41f45a80[982](https://github.com/kxcinc/pubinfra.dockerfiles/actions/runs/5502192987/jobs/10026365723#step:10:986)bd9521a2760c649f186b3fa36195": write tcp 172.17.0.2:56564->140.82.113.34:443: write: connection reset by peer
#16 62.94 retrying in 1s
#16 63.68 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/34d7b08a-8818-43f0-9ddb-90de0677[985](https://github.com/kxcinc/pubinfra.dockerfiles/actions/runs/5502192987/jobs/10026365723#step:10:989)7?digest=sha256%3A153d788c40ad6a6f5066ceae8bcd8154f29b8ca3b758c8fff080d2b0aba738da": write tcp 172.17.0.2:37398->140.82.112.34:443: write: connection reset by peer
#16 63.68 retrying in 2s
#16 pushing layers 4.5s done
#16 ERROR: failed to push ghcr.io/kxcinc/ocaml-general:ubuntu.22.04-ocaml.4.13.1-node.fermium-amd64: failed to copy: io: read/write on closed pipe
------
 > exporting to image:
62.15 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/f8819230-910f-4445-96af-7a3530b8adb4?digest=sha256%3A153d788c40ad6a6f5066ceae8bcd8154f29b8ca3b758c8fff080d2b0aba738da": write tcp 172.17.0.2:56588->140.82.113.34:443: write: connection reset by peer
62.15 retrying in 1s
62.56 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/c49dd6ec-f116-4189-ae17-db39d8c[990](https://github.com/kxcinc/pubinfra.dockerfiles/actions/runs/5502192987/jobs/10026365723#step:10:994)84?digest=sha256%3A14338e13dd953879318f0b16120454f671d68bc9b4393a6fb5562c2bc1c1e273": write tcp 172.17.0.2:56574->140.82.113.34:443: write: connection reset by peer
62.56 retrying in 1s
62.94 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/1fec9bcf-d2c9-4152-bd46-b8b1e59450d7?digest=sha256%3Ae60daa733da2a8c874aa1f20a41f45a80982bd9521a2760c649f186b3fa36195": write tcp 172.17.0.2:56564->140.82.113.34:443: write: connection reset by peer
62.94 retrying in 1s
63.68 error: failed to copy: failed to do request: Put "https://ghcr.io/v2/kxcinc/ocaml-general/blobs/upload/34d7b08a-8818-43f0-9ddb-90de06779857?digest=sha256%3A153d788c40ad6a6f5066ceae8bcd8154f29b8ca3b758c8fff080d2b0aba738da": write tcp 172.17.0.2:37398->140.82.112.34:443: write: connection reset by peer
63.68 retrying in 2s
------
ERROR: failed to solve: failed to push ghcr.io/kxcinc/ocaml-general:ubuntu.22.04-ocaml.4.13.1-node.fermium-amd64: failed to copy: io: read/write on closed pipe
Error: buildx failed with: ERROR: failed to solve: failed to push ghcr.io/kxcinc/ocaml-general:ubuntu.22.04-ocaml.4.13.1-node.fermium-amd64: failed to copy: io: read/write on closed pipe

[haochenx]

• maybe related: Build workflow failing on push to ghcr.io: connection reset by peer felddy/foundryvtt-docker#358

[haochenx]

• might be helpful: buildx failed with: ERROR: failed to solve: failed to push ghcr.io/finchsec/kali:latest: failed to copy: io: read/write on closed pipe docker/build-push-action#761 (comment)

[haochenx]

• definitely (?) related: buildx failed with: ERROR: failed to solve: failed to push ghcr.io/finchsec/kali:latest: failed to copy: io: read/write on closed pipe docker/build-push-action#761

[haochenx]

• also related: Numerous "write: connection reset by peer" on GitHub Actions (Runners) with default/bridge network mode moby/buildkit#3969

[haochenx]

Workaround example:
https://github.com/runatlantis/atlantis/blob/dd32a792b7200832853ae331c805a67a850a67a4/.github/workflows/atlantis-image.yml#L52-L57

(though moby/buildkit#3969 said setting network mode to host would help?)