blumeops/ansible/roles/forgejo_runner/handlers/main.yml at 8ca8798121839477188e20b0c8d097c4b860e123 - eblume/blumeops - Forgejo: Beyond coding. We Forge.

eblume/blumeops

Erich Blume 8ca8798121

Test CI / test (push) Successful in 4s

Details

Switch to Buildah for container builds (#51 )

## Summary
- Replace Docker with Buildah for container image builds
- No Docker socket required - buildah is daemonless
- Cleaner security model (no privileged containers or socket mounting)
- Remove Docker-related security context from deployment

## Changes
- Update Dockerfile to install buildah/podman instead of docker-cli
- Configure buildah storage with overlay driver and fuse-overlayfs
- Update composite action to use `buildah bud` and `buildah push`
- Add `imagePullPolicy: Always` to ensure fresh image pulls
- Update test workflow to verify buildah/podman

## Testing
- [ ] Runner pod starts successfully
- [ ] Buildah is available in runner
- [ ] Test workflow verifies buildah/podman versions
- [ ] Container build workflow builds and pushes to zot

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/51

2026-01-24 13:30:26 -08:00

7 lines

280 B

YAML

Raw Blame History

 ---
 - name: Restart forgejo-runner
   listen: Restart forgejo-runner
   ansible.builtin.shell: |
     launchctl unload ~/Library/LaunchAgents/mcquack.forgejo-runner.plist 2>/dev/null || true
     launchctl load ~/Library/LaunchAgents/mcquack.forgejo-runner.plist
   changed_when: true