Emil Simeonov
3c0696f3f2
Extend stopped-container protection to an explicit lease contract (org.oblachno.lease-until / org.oblachno.owner) honored by every cleanup path. Consolidate the duplicated inline prune logic from docker-prune and the healthcheck into a single tiered runner-cleanup.sh; remove the unfiltered `system prune -af --volumes` / `volume prune` paths that could wipe a job's volumes mid-run, and keep warm base images under pressure. At critical disk usage the healthcheck now stops admitting new work (stops gitea-runner.service once no CI job is in flight) and resumes it automatically after recovery. The runner config declares capacity, and the role refuses to install on production-marked hosts.
52 lines
2.0 KiB
YAML
52 lines
2.0 KiB
YAML
---
|
|
# Implements: REQ-2 (GRM-173) — shared scoped cleanup script used by both
|
|
# the prune timer and the healthcheck disk-pressure tiers.
|
|
- name: Create runner cleanup script
|
|
ansible.builtin.template:
|
|
src: runner-cleanup.sh.j2
|
|
dest: "{{ gitea_runner_cleanup_script_path }}"
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0755"
|
|
|
|
- name: Create docker-prune user service file
|
|
ansible.builtin.template:
|
|
src: docker-prune.service.j2
|
|
dest: "{{ gitea_runner_home }}/.config/systemd/user/docker-prune.service"
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0644"
|
|
register: gitea_runner_prune_service
|
|
|
|
- name: Create docker-prune user timer file
|
|
ansible.builtin.template:
|
|
src: docker-prune.timer.j2
|
|
dest: "{{ gitea_runner_home }}/.config/systemd/user/docker-prune.timer"
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0644"
|
|
register: gitea_runner_prune_timer
|
|
|
|
- name: Reload systemd user daemon for prune timer
|
|
ansible.builtin.command: >
|
|
runuser -u {{ gitea_runner_service_user }} --
|
|
env XDG_RUNTIME_DIR=/run/user/{{ gitea_runner_uid }}
|
|
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/{{ gitea_runner_uid | default(0) }}/bus
|
|
systemctl --user daemon-reload
|
|
changed_when: true
|
|
when:
|
|
- gitea_runner_systemd_available.stat.exists
|
|
- gitea_runner_docker_rootless_setup
|
|
- gitea_runner_prune_service is changed or gitea_runner_prune_timer is changed
|
|
|
|
- name: Enable and start docker-prune user timer
|
|
ansible.builtin.command: >
|
|
runuser -u {{ gitea_runner_service_user }} --
|
|
env XDG_RUNTIME_DIR=/run/user/{{ gitea_runner_uid }}
|
|
DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/{{ gitea_runner_uid | default(0) }}/bus
|
|
systemctl --user enable --now docker-prune.timer
|
|
changed_when: true
|
|
when:
|
|
- gitea_runner_systemd_available.stat.exists
|
|
- gitea_runner_docker_rootless_setup
|