blumeops/ansible/roles/forgejo_runner/defaults/main.yml
Erich Blume 8ca8798121
All checks were successful
Test CI / test (push) Successful in 4s
Switch to Buildah for container builds (#51)
## Summary
- Replace Docker with Buildah for container image builds
- No Docker socket required - buildah is daemonless
- Cleaner security model (no privileged containers or socket mounting)
- Remove Docker-related security context from deployment

## Changes
- Update Dockerfile to install buildah/podman instead of docker-cli
- Configure buildah storage with overlay driver and fuse-overlayfs
- Update composite action to use `buildah bud` and `buildah push`
- Add `imagePullPolicy: Always` to ensure fresh image pulls
- Update test workflow to verify buildah/podman

## Testing
- [ ] Runner pod starts successfully
- [ ] Buildah is available in runner
- [ ] Test workflow verifies buildah/podman versions
- [ ] Container build workflow builds and pushes to zot

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/51
2026-01-24 13:30:26 -08:00

23 lines
879 B
YAML

---
# Forgejo Runner - host execution mode
#
# The runner daemon runs directly on indri and executes jobs on the host.
# This avoids container networking complexity since it can reach Forgejo
# at localhost:3001 directly.
forgejo_runner_binary: /Users/erichblume/code/3rd/forgejo-runner/forgejo-runner
forgejo_runner_data_dir: /Users/erichblume/.forgejo-runner
forgejo_runner_config_dir: /Users/erichblume/.config/forgejo-runner
forgejo_runner_log_dir: /Users/erichblume/Library/Logs
# Runner registration - use localhost since we're running on indri
forgejo_runner_instance_url: "http://localhost:3001"
forgejo_runner_name: "indri-host-runner"
# Labels format for host execution: label:host
# Jobs run directly on the host, not in containers
forgejo_runner_labels: "ubuntu-latest:host,ubuntu-22.04:host"
# Runner config
forgejo_runner_capacity: 2
forgejo_runner_timeout: 3h