forge_ci: add runner environment reference from ops #116

New issue

Open

opened 2026-04-22 13:08:08 +00:00 by mik-tf · 0 comments

mik-tf commented

2026-04-22 13:08:08 +00:00

Owner

Peter at ops (circle_ops#760) documented exactly what our instance-wide runners support while helping unblock freezone CI (home#319). That info is useful to every repo doing container builds in Actions. Today it's spread across two issues + ~5h of trial-and-error from one session — worth consolidating into forge_ci/SKILL.md.

Proposed change

Add §9 "Runner Environment Reference" + 5 rows to existing §6 tables.

§9 covers:

Authoritative runner config (links to ourworld_it/itenv_ourworld_servers/heroforgeo_runner/)
Supported: docker build/push, podman. Not: buildah (with repro one-liner)
ghcr.io/despiegk/builder:latest inventory — preinstalled vs must-install, cargo-not-on-PATH, apt-lists-wipe gotcha, current rustc
Secrets pattern (one token, -u git hardcoded — no REGISTRY_USER secret needed)
Minimal working release.yml skeleton

§6 additions: apt MergeList parse, SIGPIPE under pipefail, docker CLI missing, buildah CLONE_NEWUSER, docker login empty username.

~105 new lines, no removals, no restructuring. PR incoming.

Peter at ops ([circle_ops#760](https://forge.ourworld.tf/coopcloud/circle_ops/issues/760)) documented exactly what our instance-wide runners support while helping unblock freezone CI ([home#319](https://forge.ourworld.tf/znzfreezone_code/home/issues/319)). That info is useful to every repo doing container builds in Actions. Today it's spread across two issues + ~5h of trial-and-error from one session — worth consolidating into `forge_ci/SKILL.md`. ## Proposed change Add §9 "Runner Environment Reference" + 5 rows to existing §6 tables. §9 covers: - Authoritative runner config (links to `ourworld_it/itenv_ourworld_servers/heroforgeo_runner/`) - Supported: `docker build/push`, `podman`. Not: `buildah` (with repro one-liner) - `ghcr.io/despiegk/builder:latest` inventory — preinstalled vs must-install, cargo-not-on-PATH, apt-lists-wipe gotcha, current rustc - Secrets pattern (one token, `-u git` hardcoded — no `REGISTRY_USER` secret needed) - Minimal working `release.yml` skeleton §6 additions: apt MergeList parse, SIGPIPE under pipefail, `docker` CLI missing, `buildah` CLONE_NEWUSER, `docker login` empty username. ~105 new lines, no removals, no restructuring. PR incoming.