Emil SimeonovandDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
55c2746569
Three major improvements: 1. Rootless Docker refactor: Removes docker/binary modes, unifies to rootless Docker with per-runner system users. Each runner gets its own rootless Docker daemon, systemd user service, and isolated environment. Simplifies CLI (removes --mode option), Ansible role (single code path), and molecule scenarios (removes binary scenario). 2. Auto-merge fix: Fixes status check context mismatch in branch protection (was requiring "lint", "unit-tests", "molecule-tests" but actual contexts are "CI / quality", "CI / molecule-tests*"). Adds retry/wait logic to auto_merge.py that polls commit statuses for up to 15 minutes before attempting merge, eliminating the chicken-and-egg problem where auto-merge would fail because CI hadn't completed yet. 3. Molecule platform matrix: Adds OS platform matrix to CI — all 6 scenarios now run on all 4 supported OSes (ubuntu-2204, ubuntu-2404, debian-12, archlinux) = 24 test pairs distributed across 3 parallel runners. Updates distribute_molecule.py to distribute (scenario, platform) pairs. Updates Makefile with molecule-all target for local multi-platform testing. Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
66 lines
1.9 KiB
YAML
66 lines
1.9 KiB
YAML
---
|
|
- name: Create per-runner system user
|
|
ansible.builtin.user:
|
|
name: "{{ gitea_runner_service_user }}"
|
|
home: "{{ gitea_runner_home }}"
|
|
shell: /bin/bash
|
|
system: true
|
|
create_home: true
|
|
register: runner_user
|
|
|
|
- name: Set runner UID fact
|
|
ansible.builtin.set_fact:
|
|
gitea_runner_uid: "{{ runner_user.uid }}"
|
|
|
|
- name: Enable lingering for runner user
|
|
ansible.builtin.command: loginctl enable-linger {{ gitea_runner_service_user }}
|
|
changed_when: true
|
|
|
|
- name: Ensure subuid entry for runner user
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/subuid
|
|
regexp: "^{{ gitea_runner_service_user }}:"
|
|
line: "{{ gitea_runner_service_user }}:100000:65536"
|
|
create: true
|
|
mode: "0644"
|
|
|
|
- name: Ensure subgid entry for runner user
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/subgid
|
|
regexp: "^{{ gitea_runner_service_user }}:"
|
|
line: "{{ gitea_runner_service_user }}:100000:65536"
|
|
create: true
|
|
mode: "0644"
|
|
|
|
- name: Ensure XDG_RUNTIME_DIR exists
|
|
ansible.builtin.file:
|
|
path: "/run/user/{{ gitea_runner_uid }}"
|
|
state: directory
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0700"
|
|
|
|
- name: Ensure runner data directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ gitea_runner_data_dir }}"
|
|
state: directory
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0755"
|
|
|
|
- name: Ensure runner config directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ gitea_runner_config_dir }}"
|
|
state: directory
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0755"
|
|
|
|
- name: Ensure systemd user directory exists
|
|
ansible.builtin.file:
|
|
path: "{{ gitea_runner_home }}/.config/systemd/user"
|
|
state: directory
|
|
owner: "{{ gitea_runner_service_user }}"
|
|
group: "{{ gitea_runner_service_user }}"
|
|
mode: "0755"
|