Erich Blume
2fad8db639
All checks were successful
Build Container / build (push) Successful in 1m31s
## Summary - Install yq in the forgejo-runner container image for structured YAML editing - Replace fragile `sed` regex patterns with `yq` in `build-blumeops.yaml` and `cv-deploy.yaml` workflows ## Deployment 1. Merge this PR 2. Tag and release forgejo-runner v3.1.0: `mise run container-tag-and-release forgejo-runner v3.1.0` 3. Update runner label in `argocd/manifests/forgejo-runner/external-secret.yaml` from `v3.0.2` to `v3.1.0` 4. Sync the forgejo-runner app: `argocd app sync forgejo-runner` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/180
75 lines
2.9 KiB
Docker
75 lines
2.9 KiB
Docker
# Forgejo Actions Job Execution Image
|
|
#
|
|
# This image is used as the job execution environment for Forgejo Actions.
|
|
# The host runner daemon creates containers from this image to run workflow steps.
|
|
#
|
|
# Build logic (container images, docs site) runs inside Dagger containers,
|
|
# so this image only needs: git, Docker CLI, Dagger CLI, ArgoCD CLI, uv, yq, and basic tools.
|
|
#
|
|
# Usage: Configure runner with label like:
|
|
# docker:docker://registry.ops.eblu.me/blumeops/forgejo-runner:latest
|
|
|
|
FROM debian:bookworm-slim
|
|
|
|
ARG TARGETARCH
|
|
|
|
# Install base dependencies
|
|
RUN apt-get update && apt-get install -y --no-install-recommends \
|
|
ca-certificates \
|
|
curl \
|
|
git \
|
|
gnupg \
|
|
jq \
|
|
tzdata \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install Node.js (required by actions/checkout and other JavaScript Actions)
|
|
RUN curl -fsSL https://deb.nodesource.com/setup_20.x | bash - \
|
|
&& apt-get install -y --no-install-recommends nodejs \
|
|
&& rm -rf /var/lib/apt/lists/* \
|
|
&& node --version
|
|
|
|
# Install Docker CLI (Dagger shells out to `docker` to provision its engine)
|
|
RUN install -m 0755 -d /etc/apt/keyrings \
|
|
&& curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc \
|
|
&& chmod a+r /etc/apt/keyrings/docker.asc \
|
|
&& echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bookworm stable" > /etc/apt/sources.list.d/docker.list \
|
|
&& apt-get update \
|
|
&& apt-get install -y --no-install-recommends docker-ce-cli \
|
|
&& rm -rf /var/lib/apt/lists/*
|
|
|
|
# Install uv (Python package runner for towncrier)
|
|
RUN curl -LsSf https://astral.sh/uv/install.sh | sh \
|
|
&& mv /root/.local/bin/uv /usr/local/bin/uv \
|
|
&& mv /root/.local/bin/uvx /usr/local/bin/uvx
|
|
|
|
# Install argocd CLI (for syncing apps from workflows)
|
|
RUN ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" \
|
|
&& curl -fsSL -o /usr/local/bin/argocd \
|
|
"https://github.com/argoproj/argo-cd/releases/latest/download/argocd-linux-${ARCH}" \
|
|
&& chmod +x /usr/local/bin/argocd \
|
|
&& argocd version --client
|
|
|
|
# Install Dagger CLI (for running Dagger CI pipelines)
|
|
ARG DAGGER_VERSION=0.19.11
|
|
RUN ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" \
|
|
&& curl -fsSL -o /tmp/dagger.tar.gz \
|
|
"https://dl.dagger.io/dagger/releases/${DAGGER_VERSION}/dagger_v${DAGGER_VERSION}_linux_${ARCH}.tar.gz" \
|
|
&& tar -xzf /tmp/dagger.tar.gz -C /usr/local/bin dagger \
|
|
&& rm /tmp/dagger.tar.gz \
|
|
&& dagger version
|
|
|
|
# Install yq (for editing YAML files in workflows)
|
|
RUN ARCH="${TARGETARCH:-$(dpkg --print-architecture)}" \
|
|
&& curl -fsSL -o /usr/local/bin/yq \
|
|
"https://github.com/mikefarah/yq/releases/latest/download/yq_linux_${ARCH}" \
|
|
&& chmod +x /usr/local/bin/yq \
|
|
&& yq --version
|
|
|
|
# Install flyctl (for Fly.io cache purge after docs deploy)
|
|
RUN curl -L https://fly.io/install.sh | sh \
|
|
&& mv /root/.fly/bin/flyctl /usr/local/bin/fly \
|
|
&& rm -rf /root/.fly
|
|
|
|
# Default to bash
|
|
CMD ["/bin/bash"]
|