Added linux gitea runners

2026-06-30 20:31:12 +02:00
parent df5a98853b
commit e59a832d5d
18 changed files with 875 additions and 4 deletions
@@ -0,0 +1,156 @@
+---
+- name: Validate required runner settings
+  ansible.builtin.assert:
+    that:
+      - windows_gitea_runner_instance_url | length > 0
+      - windows_gitea_runner_registration_token | length > 0
+      - windows_gitea_runner_runners | length > 0
+    fail_msg: >-
+      windows_gitea_runner_instance_url, windows_gitea_runner_registration_token,
+      and at least one windows_gitea_runner_runners entry are required.
+
+- name: Build effective runner matrix
+  ansible.builtin.set_fact:
+    __windows_gitea_runner_effective_runners: "{{ windows_gitea_runner_runners }}"
+
+- name: Ensure Podman auto-start service is running
+  ansible.windows.win_service:
+    name: "{{ windows_gitea_runner_podman_service_name }}"
+    start_mode: auto
+    state: started
+  become: true
+  become_method: ansible.builtin.runas
+  become_user: SYSTEM
+
+- name: Wait until Podman machine is ready
+  ansible.windows.win_shell: |
+    $ErrorActionPreference = "Stop"
+    $ready = $false
+    for ($i = 0; $i -lt 90; $i++) {
+      $null = & "{{ windows_gitea_runner_podman_install_dir }}\podman.exe" info --format json 2>$null
+      if ($LASTEXITCODE -eq 0) {
+        $ready = $true
+        break
+      }
+      Start-Sleep -Seconds 2
+    }
+    if (-not $ready) {
+      Write-Error "Podman machine {{ windows_gitea_runner_podman_machine_name }} did not become ready"
+      exit 1
+    }
+  become: true
+  become_method: ansible.builtin.runas
+  become_user: "{{ windows_gitea_runner_podman_service_user }}"
+  changed_when: false
+
+- name: Ensure base build directory exists
+  ansible.windows.win_file:
+    path: "{{ windows_gitea_runner_base_build_dir }}"
+    state: directory
+
+- name: Copy base Dockerfile to build context
+  ansible.windows.win_copy:
+    src: "{{ windows_gitea_runner_dockerfile_source_root }}/{{ windows_gitea_runner_base_dockerfile_src }}"
+    dest: "{{ windows_gitea_runner_base_build_dir }}\\Dockerfile"
+
+- name: Grant podman service user access to base build directory
+  ansible.windows.win_acl:
+    path: "{{ windows_gitea_runner_base_build_dir }}"
+    user: ".\\{{ windows_gitea_runner_podman_service_user }}"
+    rights: FullControl
+    type: allow
+    state: present
+    inherit: ContainerInherit, ObjectInherit
+    propagation: None
+  become: true
+  become_method: ansible.builtin.runas
+  become_user: SYSTEM
+
+- name: Read current base image hash label
+  ansible.windows.win_shell: |
+    $ErrorActionPreference = "Stop"
+    $podman = "{{ windows_gitea_runner_podman_install_dir }}\podman.exe"
+    $image = "{{ windows_gitea_runner_base_image }}"
+
+    $null = & $podman image exists $image 2>$null
+    if ($LASTEXITCODE -ne 0) {
+      Write-Output "__MISSING__"
+      exit 0
+    }
+
+    $raw = & $podman image inspect $image --format json 2>$null
+    if ($LASTEXITCODE -ne 0 -or [string]::IsNullOrWhiteSpace($raw)) {
+      Write-Output "__MISSING__"
+      exit 0
+    }
+
+    $obj = $raw | ConvertFrom-Json
+    if ($obj -is [System.Array]) {
+      $obj = $obj[0]
+    }
+
+    $labels = $obj.Config.Labels
+    if ($null -eq $labels) {
+      Write-Output "__UNLABELED__"
+      exit 0
+    }
+
+    $key = "{{ windows_gitea_runner_base_image_hash_label }}"
+    $current = $labels.$key
+    if ([string]::IsNullOrWhiteSpace($current)) {
+      Write-Output "__UNLABELED__"
+      exit 0
+    }
+
+    Write-Output $current.Trim()
+  become: true
+  become_method: ansible.builtin.runas
+  become_user: "{{ windows_gitea_runner_podman_service_user }}"
+  register: __windows_gitea_runner_current_base_image_hash
+  changed_when: false
+
+- name: Read desired base Dockerfile checksum
+  ansible.builtin.set_fact:
+    __windows_gitea_runner_base_dockerfile_checksum: >-
+      {{
+        lookup(
+          'file',
+          windows_gitea_runner_dockerfile_source_root ~ '/' ~ windows_gitea_runner_base_dockerfile_src
+        ) | hash('sha1')
+      }}
+
+- name: Determine if base image needs rebuild
+  ansible.builtin.set_fact:
+    __windows_gitea_runner_needs_base_image_rebuild: >-
+      {{
+        (__windows_gitea_runner_current_base_image_hash.stdout | trim)
+        != (__windows_gitea_runner_base_dockerfile_checksum | trim)
+      }}
+
+- name: Rebuild base image when Dockerfile changed
+  ansible.windows.win_shell: |
+    $ErrorActionPreference = "Stop"
+    $podman = "{{ windows_gitea_runner_podman_install_dir }}\podman.exe"
+    & $podman build `
+      --label "{{ windows_gitea_runner_base_image_hash_label }}={{ __windows_gitea_runner_base_dockerfile_checksum }}" `
+      --tag "{{ windows_gitea_runner_base_image }}" `
+      --file "{{ windows_gitea_runner_base_build_dir }}\\Dockerfile" `
+      "{{ windows_gitea_runner_base_build_dir }}"
+    if ($LASTEXITCODE -ne 0) {
+      exit 1
+    }
+    Write-Output "__BUILT__"
+  become: true
+  become_method: ansible.builtin.runas
+  become_user: "{{ windows_gitea_runner_podman_service_user }}"
+  register: __windows_gitea_runner_base_build
+  changed_when: "'__BUILT__' in __windows_gitea_runner_base_build.stdout"
+  when: __windows_gitea_runner_needs_base_image_rebuild
+
+- name: Reconcile all runners
+  ansible.builtin.include_tasks: runner.yml
+  loop: "{{ __windows_gitea_runner_effective_runners }}"
+  loop_control:
+    loop_var: windows_gitea_runner_runner
+    label: >-
+      {{ windows_gitea_runner_runner.name | default(windows_gitea_runner_runner.profile) }}