Erich Blume
1f73eb675d
## Summary - Add `uv` and `argocd` CLI to forgejo-runner container image - Add `workflow-bot` ArgoCD account with sync permissions (declarative via kustomize patches) - Add `ARGOCD_AUTH_TOKEN` to forgejo-runner external secret for workflow auth - Update build workflow to auto-deploy docs after release: - Update configmap with new release URL - Commit changelog and configmap changes - Sync docs app via ArgoCD ## Deployment and Testing Manual steps required before this can work: 1. [ ] Build and push new forgejo-runner image (v2.4.0) 2. [ ] Sync argocd app to create workflow-bot account 3. [ ] Generate token: `argocd account generate-token --account workflow-bot` 4. [ ] Store token in 1Password under "Forgejo Secrets" with field `argocd_token` 5. [ ] Sync forgejo-runner app to pick up new external secret 6. [ ] Update forgejo-runner deployment to use new image version 7. [ ] Test by running workflow manually 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/93
52 lines
2 KiB
Docker
52 lines
2 KiB
Docker
# Forgejo Actions Job Execution Image
|
|
#
|
|
# This image is used as the job execution environment for Forgejo Actions.
|
|
# The host runner daemon creates containers from this image to run workflow steps.
|
|
#
|
|
# Includes: Node.js (for GitHub Actions), Docker CLI, git, and common CI tools.
|
|
#
|
|
# Usage: Configure runner with label like:
|
|
# docker:docker://registry.ops.eblu.me/blumeops/forgejo-runner:latest
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
ARG TARGETARCH
|
|
|
|
# Install base dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
git \
|
|
jq \
|
|
gnupg \
|
|
lsb-release \
|
|
xz-utils \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Node.js 24.x LTS (required for actions/checkout@v4 and Quartz builds)
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_24.x | bash - \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Docker CLI (for container builds - daemon accessed via socket mount)
|
|
# and skopeo (for pushing images to zot registry - Docker 27 manifest compat issues)
|
|
RUN install -m 0755 -d /etc/apt/keyrings \
|
|
&& curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
|
|
&& chmod a+r /etc/apt/keyrings/docker.asc \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian $(lsb_release -cs) stable" > /etc/apt/sources.list.d/docker.list \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends docker-ce-cli skopeo \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install uv (Python package runner for towncrier)
|
|
RUN curl -LsSf https://astral.sh/uv/install.sh | sh \
|
|
&& mv /root/.local/bin/uv /usr/local/bin/uv \
|
|
&& mv /root/.local/bin/uvx /usr/local/bin/uvx
|
|
|
|
# Install argocd CLI (for syncing apps from workflows)
|
|
RUN curl -sSL -o /usr/local/bin/argocd \
|
|
"https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-${TARGETARCH}" \
|
|
&& chmod +x /usr/local/bin/argocd
|
|
|
|
# Default to bash
|
|
CMD ["/bin/bash"]
|