initial commit

2026-07-13 10:13:26 +02:00
commit b807ab2022
21 changed files with 2348 additions and 0 deletions
@@ -0,0 +1,62 @@
+name: olixero-ci-agent
+
+x-runner-common: &runner-common
+  build:
+    context: .
+    dockerfile: Dockerfile
+  image: ${CI_AGENT_IMAGE:-olixero-ci-agent-runner:1.0.0}
+  user: "10001:10001"
+  environment:
+    HOME: /home/ci-agent
+    XDG_DATA_HOME: /var/lib/opencode-ci/data
+    XDG_CONFIG_HOME: /opt/ci-agents/empty-config
+    XDG_CACHE_HOME: /var/lib/opencode-ci/cache
+    CONFIG_FILE: /etc/gitea-runner/config.yaml
+  volumes:
+    - ${RUNNER_DATA_DIR:-./state/runner}:/data
+    - ${OPENCODE_DATA_DIR:-./state/opencode}:/var/lib/opencode-ci/data
+    - ${CACHE_DIR:-./state/cache}:/var/lib/opencode-ci/cache
+    - ./runner-config.yaml:/etc/gitea-runner/config.yaml:ro
+  tmpfs:
+    - /tmp:rw,nosuid,nodev,mode=1777
+
+services:
+  runner:
+    <<: *runner-common
+    restart: unless-stopped
+    read_only: true
+    stop_grace_period: 2m
+
+  register:
+    <<: *runner-common
+    profiles: ["register"]
+    restart: "no"
+    user: "0:0"
+    read_only: true
+    entrypoint: ["/bin/sh", "-ec"]
+    command:
+      - |
+        test ! -s /data/.runner || { echo 'Runner is already registered.'; exit 1; }
+        token="$$(cat /run/secrets/runner_registration_token)"
+        gitea-runner register --no-interactive \
+          --config /etc/gitea-runner/config.yaml \
+          --instance "$${GITEA_INSTANCE_URL}" \
+          --token "$${token}" \
+          --name "$${GITEA_RUNNER_NAME}" \
+          --labels "agentic:host"
+        unset token
+        chown 10001:10001 /data/.runner
+        chmod 0600 /data/.runner
+    environment:
+      HOME: /home/ci-agent
+      XDG_DATA_HOME: /var/lib/opencode-ci/data
+      XDG_CONFIG_HOME: /opt/ci-agents/empty-config
+      XDG_CACHE_HOME: /var/lib/opencode-ci/cache
+      GITEA_INSTANCE_URL: ${GITEA_INSTANCE_URL:?Set GITEA_INSTANCE_URL in .env}
+      GITEA_RUNNER_NAME: ${GITEA_RUNNER_NAME:-olixero-agentic}
+    secrets:
+      - runner_registration_token
+
+secrets:
+  runner_registration_token:
+    file: ${RUNNER_TOKEN_FILE:-./secrets/runner-token}