vince/dimensionlab-website
1
0
Fork 0
Code Issues 5 Pull requests Projects Releases Packages Wiki Activity Actions

ci: use dedicated host deploy runner #56

Merged
vince merged 1 commit from codex/use-host-deploy-runner into main 2026-06-20 17:41:46 +02:00
Conversation 0 Commits 1 Files changed 3 +34 -20
vince commented 2026-06-20 17:35:42 +02:00
Owner
Copy link

Summary

  • Move the production deploy job from the general containerized docker runner to a dedicated deploy host runner.
  • Use podman directly in the deploy preflight and deploy script environment.
  • Update README/tests to document the split between PR CI and production deploy privileges.

Why

The previous deploy job ran in a job container and could not access the rootless Podman socket under SELinux, so main deploys failed before the build. The dedicated host runner keeps normal PR CI containerized while allowing guarded main deploys to use the host user's Podman/systemd tools.

Testing

  • bun install --frozen-lockfile
  • bun run check
  • bun run test

Notes

The live host now has a repo-scoped linux-infra-253-deploy Forgejo runner registered with deploy:host; the general runner was restarted with job-container socket mounting disabled.

## Summary - Move the production deploy job from the general containerized docker runner to a dedicated `deploy` host runner. - Use `podman` directly in the deploy preflight and deploy script environment. - Update README/tests to document the split between PR CI and production deploy privileges. ## Why The previous deploy job ran in a job container and could not access the rootless Podman socket under SELinux, so main deploys failed before the build. The dedicated host runner keeps normal PR CI containerized while allowing guarded main deploys to use the host user's Podman/systemd tools. ## Testing - `bun install --frozen-lockfile` - `bun run check` - `bun run test` ## Notes The live host now has a repo-scoped `linux-infra-253-deploy` Forgejo runner registered with `deploy:host`; the general runner was restarted with job-container socket mounting disabled.
vince added 1 commit 2026-06-20 17:35:42 +02:00
ci: use dedicated host deploy runner
All checks were successful
Dimension Lab website / ci (pull_request) Successful in 19s
Details
Dimension Lab website / deploy (pull_request) Has been skipped
Details
a3bcd33961
vince force-pushed codex/use-host-deploy-runner from a3bcd33961 to d00a7b3b80 2026-06-20 17:37:39 +02:00 Compare
vince merged commit 8b0ef39cdf into main 2026-06-20 17:41:46 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
agent

AI-agent configuration surface and tool contracts

  
architecture

Product architecture and core technical decisions

  
backend

Server runtime, persistence, and APIs

  
frontend

Frontend UI, renderer, and visual system work

  
quality

Testing, accessibility, QA, and release readiness

  
telemetry

Metrics, health checks, status, and datasource integrations

  
umbrella

Tracks a multi-part design/build initiative

No labels
agent
architecture
backend
frontend
quality
telemetry
umbrella
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: vince/dimensionlab-website#56
No description provided.
Delete branch "codex/use-host-deploy-runner"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?