eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions

Add dagger to nix-container-builder runner hostPackages

Browse source 
The nix workflow's version extraction fallback (dagger call nix-version)
needs dagger available on the ringtail runner. hostPackages is scoped to
the runner's systemd unit PATH, not system-wide.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-02-20 23:08:21 -08:00
commit d8b4fc62b5
3 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
docs/reference/infrastructure/ringtail.md
View file

@ -96,7 +96,6 @@ A native Forgejo Actions runner (`ringtail-nix-builder`) runs as a systemd servi
| **Execution** | Host (no containers) |
| **Token** | `/etc/forgejo-runner/token.env` (provisioned by Ansible) |
| **Service unit** | `gitea-runner-nix_container_builder.service` |
| **Host packages** | bash, coreutils, curl, gawk, git, gnused, jq, nodejs, wget, nix, skopeo |
The runner resolves `<nixpkgs>` from the flake registry at build time. Container trust policy (`/etc/containers/policy.json`) and registry search order (`/etc/containers/registries.conf`) are configured minimally in `configuration.nix` for skopeo — no full `virtualisation.containers` module needed.