Rootless Docker requires newuidmap/newgidmap kernel support which doesn't work in nested Docker containers (Operation not permitted). Added docker_rootless_setup variable (default true) to skip the daemon startup steps. Set to false in all molecule converge playbooks so tests verify package installation, user creation, service file rendering, and config without requiring a working rootless daemon. Generated with [Devin](https://devin.ai) Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
41 lines
1.6 KiB
YAML
41 lines
1.6 KiB
YAML
---
|
|
gitea_runner_version: "1.0.8"
|
|
runner_labels: "docker,ubuntu-latest:docker://runner-images:ubuntu-22.04"
|
|
skip_runner_registration: false
|
|
|
|
# Per-runner user (rootless isolation)
|
|
gitea_runner_user_prefix: "grm-"
|
|
gitea_runner_base_home: "/home"
|
|
gitea_runner_service_user: "{{ gitea_runner_user_prefix }}{{ runner_name }}"
|
|
gitea_runner_home: "{{ gitea_runner_base_home }}/{{ gitea_runner_service_user }}"
|
|
|
|
# Base paths (instance-scoped via runner_name)
|
|
gitea_runner_base_data_dir: "/var/lib/gitea-runner"
|
|
gitea_runner_base_config_dir: "/etc/gitea-runner"
|
|
gitea_runner_data_dir: "{{ gitea_runner_base_data_dir }}/{{ runner_name }}"
|
|
gitea_runner_config_dir: "{{ gitea_runner_base_config_dir }}/{{ runner_name }}"
|
|
gitea_runner_binary_path: "/usr/local/bin/gitea_runner"
|
|
|
|
# Prune configuration
|
|
gitea_runner_prune_until: "24h"
|
|
gitea_runner_prune_schedule: "daily"
|
|
gitea_runner_prune_label: "gitea-runner=true"
|
|
|
|
# Service configuration
|
|
gitea_runner_service_restart_sec: "5"
|
|
|
|
# Runner configuration
|
|
gitea_runner_log_level: "info"
|
|
gitea_runner_container_label: "gitea-runner=true"
|
|
gitea_runner_file: ".runner"
|
|
|
|
# Docker installation (for rootless dependencies)
|
|
docker_gpg_key_path: "/etc/apt/keyrings/docker.gpg"
|
|
docker_apt_arch: "{{ 'amd64' if ansible_facts['architecture'] == 'x86_64' else ansible_facts['architecture'] }}"
|
|
docker_apt_source_line: >-
|
|
deb [arch={{ docker_apt_arch }} signed-by={{ docker_gpg_key_path }}]
|
|
https://download.docker.com/linux/{{ ansible_facts['distribution'] | lower }}
|
|
{{ ansible_facts['distribution_release'] }} stable
|
|
# Set to false in CI/molecule to skip rootless daemon startup (needs kernel userns)
|
|
docker_rootless_setup: true
|