mirror of
https://gitea.com/gitea/act_runner
synced 2026-09-21 19:37:07 +02:00
silverwind
5310d8119a
Podman creates a missing bind source instead of rejecting it, so the Docker proxy probe passed even when the daemon could not see the runner's files. Jobs of Podman runners in a container got an empty directory at `/var/run/docker.sock` (https://gitea.com/gitea/runner/issues/1193#issuecomment-1700501). The probe now binds the directory and stats its marker through the created container. A runner in a container stats the marker through its own container, so it no longer creates probe containers, which cost up to 2s per job. `make test-dind TARGET=podman` runs the probe against Podman in CI. Reviewed-on: https://gitea.com/gitea/runner/pulls/1231 Reviewed-by: bircni <bircni@icloud.com> Co-authored-by: silverwind <me@silverwind.io>
81 lines
3.2 KiB
YAML
81 lines
3.2 KiB
YAML
name: checks
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
pull_request:
|
|
|
|
env:
|
|
# The runner image ships a stale docker.io login; point docker at an empty config so
|
|
# image pulls go straight to anonymous instead of attempting (and failing) that auth
|
|
# first. The path must be a literal: the `runner` context is unavailable in workflow-level
|
|
# env, so `${{ runner.temp }}` would resolve to empty and config.Dir() would fall back
|
|
# to ~/.docker with the stale credentials.
|
|
DOCKER_CONFIG: /tmp/docker-noauth
|
|
|
|
jobs:
|
|
lint:
|
|
name: check and test
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
|
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
|
|
with:
|
|
go-version-file: 'go.mod'
|
|
check-latest: true
|
|
- name: prepare anonymous docker config
|
|
run: mkdir -p "$DOCKER_CONFIG" && echo '{}' > "$DOCKER_CONFIG/config.json"
|
|
# Pre-pull act/runner's two largest base images so a slow pull can't dominate `make test`;
|
|
# the rest (alpine/ubuntu) pull on demand, absorbed by the make-test -timeout. The host
|
|
# daemon retains them between runs, so this is usually a fast manifest re-check.
|
|
- name: pre-pull test images
|
|
env:
|
|
TEST_JOB_IMAGE: node:24-bookworm-slim@sha256:2fe369e969550cde8e867afc3fe370b260140cab4a23d467074295b42163d553 # renovate: datasource=docker
|
|
TEST_SERVICE_IMAGE: nginx:alpine@sha256:72ba65eb42c10344912a84ff42408db7d34f2feb642204570ab8fc5ffd29f1d3 # renovate: datasource=docker
|
|
run: |
|
|
for image in "$TEST_JOB_IMAGE" "$TEST_SERVICE_IMAGE"; do
|
|
for attempt in 1 2 3; do
|
|
docker pull "$image" && break
|
|
[ "$attempt" = 3 ] || sleep 5
|
|
done
|
|
docker tag "$image" "${image%@*}"
|
|
done
|
|
- name: lint
|
|
run: make lint
|
|
- name: checks
|
|
run: make checks
|
|
- name: build
|
|
run: make build
|
|
- name: test
|
|
run: make test
|
|
# Build the dind image and run the daemon-facing tests against the docker version it
|
|
# ships, catching daemon-level regressions (e.g. gitea/runner#981) before release. Runs
|
|
# after `make test` so the images it needs are already present on the host daemon.
|
|
- name: test against dind image
|
|
run: make test-dind
|
|
- name: test against podman
|
|
run: make test-dind TARGET=podman
|
|
- name: coverage report
|
|
run: |
|
|
make coverage-report
|
|
cat .tmp/coverage.md >> "$GITHUB_STEP_SUMMARY"
|
|
|
|
e2e:
|
|
name: gitea compatibility (${{ matrix.gitea_image }})
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
matrix:
|
|
gitea_image:
|
|
- gitea/gitea:latest
|
|
- gitea/gitea:main-nightly
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
|
|
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
|
|
with:
|
|
go-version-file: 'go.mod'
|
|
check-latest: true
|
|
- name: prepare anonymous docker config
|
|
run: mkdir -p "$DOCKER_CONFIG" && echo '{}' > "$DOCKER_CONFIG/config.json"
|
|
- name: e2e compatibility
|
|
run: make test-e2e E2E_GITEA_IMAGE=${{ matrix.gitea_image }}
|