mirror of
https://code.forgejo.org/forgejo/runner.git
synced 2025-09-05 18:40:59 +00:00
914808bea0
This PR contains the following updates: | Package | Update | Change | |---|---|---| | [code.forgejo.org/forgejo/runner](https://forgejo.org) ([source](https://code.forgejo.org/forgejo/runner)) | patch | `9.1.0` -> `9.1.1` | --- ### Release Notes <details> <summary>forgejo/runner (code.forgejo.org/forgejo/runner)</summary> ### [`v9.1.1`](https://code.forgejo.org/forgejo/runner/releases/tag/v9.1.1) [Compare Source](https://code.forgejo.org/forgejo/runner/compare/v9.1.0...v9.1.1) - [User guide](https://forgejo.org/docs/next/user/actions/overview/) - [Administrator guide](https://forgejo.org/docs/next/admin/actions/) - [Container images](https://code.forgejo.org/forgejo/-/packages/container/runner/versions) Release Notes *** </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS43Ni4wIiwidXBkYXRlZEluVmVyIjoiNDEuNzYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiS2luZC9DaG9yZSJdfQ==--> <!--start release-notes-assistant--> <!--URL:https://code.forgejo.org/forgejo/runner--> - other - [PR](https://code.forgejo.org/forgejo/runner/pulls/897): <!--number 897 --><!--line 0 --><!--description VXBkYXRlIGNvZGUuZm9yZ2Vqby5vcmcvZm9yZ2Vqby9ydW5uZXIgRG9ja2VyIHRhZyB0byB2OS4xLjE=-->Update code.forgejo.org/forgejo/runner Docker tag to v9.1.1<!--description--> <!--end release-notes-assistant--> Reviewed-on: https://code.forgejo.org/forgejo/runner/pulls/897 Reviewed-by: earl-warren <earl-warren@noreply.code.forgejo.org> Co-authored-by: Renovate Bot <bot@kriese.eu> Co-committed-by: Renovate Bot <bot@kriese.eu>
94 lines
3 KiB
YAML
94 lines
3 KiB
YAML
# Copyright 2024 The Forgejo Authors.
|
|
# SPDX-License-Identifier: MIT
|
|
|
|
#
|
|
# Create a secret with:
|
|
#
|
|
# openssl rand -hex 20
|
|
#
|
|
# Replace all occurrences of {SHARED_SECRET} below with the output.
|
|
#
|
|
# NOTE: a token obtained from the Forgejo web interface cannot be used
|
|
# as a shared secret.
|
|
#
|
|
# Replace {ROOT_PASSWORD} with a secure password
|
|
#
|
|
|
|
volumes:
|
|
docker_certs:
|
|
|
|
services:
|
|
|
|
docker-in-docker:
|
|
image: code.forgejo.org/oci/docker:dind
|
|
hostname: docker # Must set hostname as TLS certificates are only valid for docker or localhost
|
|
privileged: true
|
|
environment:
|
|
DOCKER_TLS_CERTDIR: /certs
|
|
DOCKER_HOST: docker-in-docker
|
|
volumes:
|
|
- docker_certs:/certs
|
|
|
|
forgejo:
|
|
image: code.forgejo.org/forgejo/forgejo:11.0
|
|
command: >-
|
|
bash -c '
|
|
/usr/bin/s6-svscan /etc/s6 &
|
|
sleep 10 ;
|
|
su -c "forgejo forgejo-cli actions register --secret {SHARED_SECRET}" git ;
|
|
su -c "forgejo admin user create --admin --username root --password {ROOT_PASSWORD} --email root@example.com" git ;
|
|
sleep infinity
|
|
'
|
|
environment:
|
|
FORGEJO__security__INSTALL_LOCK: "true"
|
|
FORGEJO__log__LEVEL: "debug"
|
|
FORGEJO__repository__ENABLE_PUSH_CREATE_USER: "true"
|
|
FORGEJO__repository__DEFAULT_PUSH_CREATE_PRIVATE: "false"
|
|
FORGEJO__repository__DEFAULT_REPO_UNITS: "repo.code,repo.actions"
|
|
volumes:
|
|
- /srv/forgejo-data:/data
|
|
ports:
|
|
- 8080:3000
|
|
|
|
runner-register:
|
|
image: code.forgejo.org/forgejo/runner:9.1.1
|
|
links:
|
|
- docker-in-docker
|
|
- forgejo
|
|
environment:
|
|
DOCKER_HOST: tcp://docker-in-docker:2376
|
|
volumes:
|
|
- /srv/runner-data:/data
|
|
user: 0:0
|
|
command: >-
|
|
bash -ec '
|
|
while : ; do
|
|
forgejo-runner create-runner-file --connect --instance http://forgejo:3000 --name runner --secret {SHARED_SECRET} && break ;
|
|
sleep 1 ;
|
|
done ;
|
|
sed -i -e "s|\"labels\": null|\"labels\": [\"docker-cli:docker://code.forgejo.org/oci/docker:cli\",\"node-bookworm:docker://code.forgejo.org/oci/node:20-bookworm\"]|" .runner ;
|
|
forgejo-runner generate-config > config.yml ;
|
|
sed -i -e "s| level: info| level: debug|" config.yml ;
|
|
sed -i -e "s|network: .*|network: host|" config.yml ;
|
|
sed -i -e "s|^ envs:$$| envs:\n DOCKER_HOST: tcp://docker:2376\n DOCKER_TLS_VERIFY: 1\n DOCKER_CERT_PATH: /certs/client|" config.yml ;
|
|
sed -i -e "s|^ options:| options: -v /certs/client:/certs/client|" config.yml ;
|
|
sed -i -e "s| valid_volumes: \[\]$$| valid_volumes:\n - /certs/client|" config.yml ;
|
|
chown -R 1000:1000 /data
|
|
'
|
|
|
|
runner-daemon:
|
|
image: code.forgejo.org/forgejo/runner:9.1.1
|
|
links:
|
|
- docker-in-docker
|
|
- forgejo
|
|
environment:
|
|
DOCKER_HOST: tcp://docker:2376
|
|
DOCKER_CERT_PATH: /certs/client
|
|
DOCKER_TLS_VERIFY: "1"
|
|
volumes:
|
|
- /srv/runner-data:/data
|
|
- docker_certs:/certs
|
|
command: >-
|
|
bash -c '
|
|
while : ; do test -w .runner && forgejo-runner --config config.yml daemon ; sleep 1 ; done
|
|
'
|