Add multiple Dockerfiles for various Gitea runner profiles and update host vars

2026-07-03 21:52:13 +02:00
parent c6f3b0f829
commit 9a9b36cac6
10 changed files with 27 additions and 75 deletions
@@ -0,0 +1,18 @@
+FROM local/gitea-runner-base:latest
+
+# cicd-base runner profile: common CI build and release tooling.
+USER root
+RUN apk add --no-cache \
+	bash \
+	ca-certificates \
+	curl \
+	git \
+	jq \
+	make \
+	openssh-client \
+	python3 \
+	py3-pip \
+	rsync \
+	unzip \
+	yq \
+	zip
@@ -0,0 +1,20 @@
+FROM local/gitea-runner-base:latest
+
+# cpp-build runner profile: dedicated C/C++ build environment.
+USER root
+RUN apk add --no-cache \
+	bash \
+	build-base \
+	ca-certificates \
+	cmake \
+	curl \
+	git \
+	jq \
+	make \
+	openssh-client \
+	python3 \
+	py3-pip \
+	rsync \
+	unzip \
+	yq \
+	zip
@@ -0,0 +1,13 @@
+FROM docker.io/gitea/runner:latest
+
+USER root
+
+RUN apk add --no-cache \
+    bash \
+    ca-certificates \
+    curl \
+    git \
+    jq \
+    openssh-client \
+    unzip \
+    zip
@@ -0,0 +1,19 @@
+FROM local/gitea-runner-base:latest
+
+# go-build runner profile: dedicated Go build environment.
+USER root
+RUN apk add --no-cache \
+	bash \
+	ca-certificates \
+	curl \
+	git \
+	go \
+	jq \
+	make \
+	openssh-client \
+	python3 \
+	py3-pip \
+	rsync \
+	unzip \
+	yq \
+	zip
@@ -0,0 +1,32 @@
+FROM local/gitea-runner-base:latest
+
+# image-build runner profile: dedicated environment for container image builds.
+USER root
+RUN apk add --no-cache \
+	bash \
+	buildah \
+	ca-certificates \
+	curl \
+	fuse-overlayfs \
+	git \
+	iptables \
+	jq \
+	make \
+	openssh-client \
+	podman \
+	python3 \
+	py3-pip \
+	rsync \
+	shadow-uidmap \
+	skopeo \
+	slirp4netns \
+	unzip \
+	yq \
+	zip
+
+RUN mkdir -p /etc/containers /var/lib/containers /run/containers && \
+	printf '%s\n' '[storage]' 'driver = "vfs"' > /etc/containers/storage.conf && \
+	printf '%s\n' '[engine]' > /etc/containers/containers.conf
+
+ENV BUILDAH_ISOLATION=chroot
+ENV STORAGE_DRIVER=vfs
@@ -0,0 +1,28 @@
+FROM local/gitea-runner-base:latest
+
+# infra-tools runner profile: Ansible and infrastructure automation tools.
+USER root
+RUN apk add --no-cache \
+		bash \
+		ca-certificates \
+		curl \
+		git \
+		jq \
+		make \
+		openssh-client \
+		python3 \
+		py3-pip \
+		rsync \
+		unzip \
+		yq \
+		zip && \
+		python3 -m venv /opt/infra-venv && \
+		/opt/infra-venv/bin/pip install --no-cache-dir \
+			ansible \
+			ansible-lint \
+			bcrypt \
+			fabric \
+			passlib \
+			pywinrm
+
+ENV PATH="/opt/infra-venv/bin:${PATH}"
@@ -0,0 +1,25 @@
+FROM local/gitea-runner-base:latest
+
+# security-scan runner profile: image and dependency scanning tooling.
+USER root
+RUN apk add --no-cache \
+	bash \
+	ca-certificates \
+	curl \
+	git \
+	jq \
+	make \
+	openssh-client \
+	python3 \
+	py3-pip \
+	rsync \
+	unzip \
+	yq \
+	zip
+
+ARG TRIVY_VERSION=0.72.0
+RUN curl -fsSL -o /tmp/trivy.tar.gz \
+	"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz" && \
+	tar -xzf /tmp/trivy.tar.gz -C /tmp && \
+	install -m 0755 /tmp/trivy /usr/local/bin/trivy && \
+	rm -f /tmp/trivy.tar.gz /tmp/trivy