docs(ci): document Forgejo deploy runner option #55

Merged
vince merged 1 commit from codex/document-forgejo-runner-deploy-option into main 2026-06-20 17:24:41 +02:00
Owner

Summary

Document the Forgejo Runner setting required for the website deploy workflow to access the rootless Podman socket.

Why

The automatic deploy job uses the Docker-compatible Podman socket exposed to job containers. On this SELinux host, job containers need --security-opt label=disable; without it the deploy preflight fails safe before deployment.

Changes

  • Add a Forgejo Actions deployment note to README.md.
  • Document the container.options: --security-opt label=disable runner setting.
  • Clarify that PRs run CI only and main pushes run deploy.

Testing

  • git diff --check
  • bun --cwd apps/web test src/lib/workspace-boundary.test.ts

Notes

The runner host config has already been updated and forgejo-runner.service restarted on linux-infra.

## Summary Document the Forgejo Runner setting required for the website deploy workflow to access the rootless Podman socket. ## Why The automatic deploy job uses the Docker-compatible Podman socket exposed to job containers. On this SELinux host, job containers need `--security-opt label=disable`; without it the deploy preflight fails safe before deployment. ## Changes - Add a Forgejo Actions deployment note to `README.md`. - Document the `container.options: --security-opt label=disable` runner setting. - Clarify that PRs run CI only and main pushes run deploy. ## Testing - `git diff --check` - `bun --cwd apps/web test src/lib/workspace-boundary.test.ts` ## Notes The runner host config has already been updated and `forgejo-runner.service` restarted on linux-infra.
vince added 1 commit 2026-06-20 17:22:31 +02:00
docs(ci): document Forgejo deploy runner option
All checks were successful
Dimension Lab website / ci (pull_request) Successful in 20s
Dimension Lab website / deploy (pull_request) Has been skipped
16c69a1065
vince merged commit da9a5a942d into main 2026-06-20 17:24:41 +02:00
Sign in to join this conversation.
No description provided.