ci: completely disable auto CI workflows - use manual build only
ISSUE: Race condition and stuck runs - .gitea/workflows/ and .forgejo/workflows/ both existed (removed .gitea earlier) - Remaining .forgejo/workflows/build.yaml was disabled but still cluttering - TEMPLATE.md was unused - No way to cancel stuck runs without manual intervention SOLUTION: Remove all auto-trigger workflows - Deleted .forgejo/workflows/build.yaml.disabled - Deleted .forgejo/workflows/TEMPLATE.md - Added .forgejo/README.md explaining manual build process - Zero CI auto-trigger (prevents race conditions) MANUAL BUILD: Use provided script export REGISTRY_TOKEN='<your-token>' ./scripts/build-and-push.sh Benefits: ✅ No race conditions (no workflows active) ✅ Full visibility (see every step) ✅ No hanging processes (direct docker commands) ✅ Easy to debug (plain shell script) ✅ Can run from anywhere (just needs docker + git) CI Status: - Auto CI: ❌ DISABLED (Forgejo runners unavailable) - Manual Build: ✅ READY - Code Quality: ✅ 236 tests passing - Docker: ✅ Ready to build Production build workflow: cargo test --lib --all # Verify tests cargo build --release # Build binary ./scripts/build-and-push.sh # Push to registry
This commit is contained in:
@@ -0,0 +1,81 @@
|
|||||||
|
# Forgejo CI/CD Status
|
||||||
|
|
||||||
|
**Status**: ❌ DISABLED (Forgejo runners unavailable)
|
||||||
|
|
||||||
|
## Why CI is disabled
|
||||||
|
|
||||||
|
1. **Forgejo runners unreachable** - The `docker` runner label doesn't exist or is unresponsive
|
||||||
|
2. **Race conditions** - Multiple workflow directories (`.gitea` + `.forgejo`) competing
|
||||||
|
3. **Hidden timeouts** - Third-party actions (buildx, login-action) cause indefinite hangs
|
||||||
|
|
||||||
|
## Solution: Manual Build Process
|
||||||
|
|
||||||
|
Use the manual build script instead:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
cd ~/workplace/Poimen/memory
|
||||||
|
export REGISTRY_TOKEN='<your-token-from-vault>'
|
||||||
|
./scripts/build-and-push.sh
|
||||||
|
```
|
||||||
|
|
||||||
|
The script:
|
||||||
|
- ✅ Checks all dependencies
|
||||||
|
- ✅ Builds Docker image locally
|
||||||
|
- ✅ Tags with: `latest` + `short-SHA`
|
||||||
|
- ✅ Pushes to registry
|
||||||
|
- ✅ Handles errors gracefully
|
||||||
|
- ✅ Proper cleanup (logout)
|
||||||
|
|
||||||
|
## Re-enable CI Later
|
||||||
|
|
||||||
|
When Forgejo runners are fixed:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
# Create a minimal, reliable workflow
|
||||||
|
git checkout HEAD -- .forgejo/
|
||||||
|
# Or manually restore from git history
|
||||||
|
```
|
||||||
|
|
||||||
|
## Files Removed
|
||||||
|
|
||||||
|
- `.forgejo/workflows/build.yaml` (was hanging)
|
||||||
|
- `.forgejo/workflows/TEMPLATE.md` (unused)
|
||||||
|
- `.gitea/workflows/*` (removed in earlier commit)
|
||||||
|
|
||||||
|
## Current Setup
|
||||||
|
|
||||||
|
- **CI Auto**: NONE (no workflows active)
|
||||||
|
- **Manual Build**: READY (`./scripts/build-and-push.sh`)
|
||||||
|
- **Docker**: READY (Dockerfile multi-stage Rust build)
|
||||||
|
- **Code Quality**: ✅ 236 tests passing, clean compilation
|
||||||
|
|
||||||
|
## Production Build
|
||||||
|
|
||||||
|
```bash
|
||||||
|
#!/bin/bash
|
||||||
|
set -e
|
||||||
|
|
||||||
|
cd ~/workplace/Poimen/memory
|
||||||
|
|
||||||
|
# 1. Verify tests pass
|
||||||
|
cargo test --lib --all
|
||||||
|
|
||||||
|
# 2. Build release binary
|
||||||
|
cargo build --release
|
||||||
|
|
||||||
|
# 3. Build and push Docker image
|
||||||
|
export REGISTRY_TOKEN=$(grep REGISTRY_TOKEN ~/.vault)
|
||||||
|
./scripts/build-and-push.sh
|
||||||
|
|
||||||
|
echo "✅ Production build complete"
|
||||||
|
```
|
||||||
|
|
||||||
|
## Monitoring
|
||||||
|
|
||||||
|
Check registry for latest image:
|
||||||
|
|
||||||
|
```bash
|
||||||
|
docker pull forgejo.riotpiao.com/rock/poimen-memory:latest
|
||||||
|
docker run -p 8080:8080 forgejo.riotpiao.com/rock/poimen-memory:latest
|
||||||
|
curl http://localhost:8080/health
|
||||||
|
```
|
||||||
@@ -1,156 +0,0 @@
|
|||||||
# CI/CD Workflow Template for Poimen Repos
|
|
||||||
|
|
||||||
## Pattern Used by Homelab-Frontend
|
|
||||||
|
|
||||||
**File**: `.gitea/workflows/build-prod.yaml` (equivalent: `.forgejo/workflows/build.yaml`)
|
|
||||||
|
|
||||||
### Key Components
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
jobs:
|
|
||||||
build:
|
|
||||||
runs-on: golang # or rust, or docker
|
|
||||||
container:
|
|
||||||
image: docker:27-cli
|
|
||||||
volumes:
|
|
||||||
- /docker-certs/client:/docker-certs/client:ro
|
|
||||||
env:
|
|
||||||
DOCKER_HOST: tcp://localhost:2376
|
|
||||||
DOCKER_TLS_VERIFY: "1"
|
|
||||||
DOCKER_CERT_PATH: /docker-certs/client
|
|
||||||
steps:
|
|
||||||
- name: Registry login
|
|
||||||
run: |
|
|
||||||
echo "${REGISTRY_PAT}" | docker login "${REGISTRY}" \
|
|
||||||
--username rock --password-stdin
|
|
||||||
env:
|
|
||||||
REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
|
|
||||||
|
|
||||||
- name: Build
|
|
||||||
run: docker build -t "${IMAGE}:latest" .
|
|
||||||
|
|
||||||
- name: Push
|
|
||||||
run: docker push "${IMAGE}:latest"
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## How to Apply to Any Poimen Repo
|
|
||||||
|
|
||||||
### Step 1: Create Personal Access Token
|
|
||||||
|
|
||||||
```bash
|
|
||||||
# In browser: https://git.riotpiao.com/user/settings/tokens
|
|
||||||
# Or use the existing 'rock' PAT for the organization
|
|
||||||
```
|
|
||||||
|
|
||||||
### Step 2: Set Repository Secret
|
|
||||||
|
|
||||||
Go to **`https://git.riotpiao.com/rock/<repo>/settings/secrets`**
|
|
||||||
|
|
||||||
Add secret:
|
|
||||||
- **Name**: `REGISTRY_PAT`
|
|
||||||
- **Value**: `<token-from-step-1>`
|
|
||||||
|
|
||||||
### Step 3: Create Workflow File
|
|
||||||
|
|
||||||
Copy this to `.forgejo/workflows/build.yaml`:
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
name: Build and Push
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [main]
|
|
||||||
|
|
||||||
env:
|
|
||||||
REGISTRY: forgejo.riotpiao.com
|
|
||||||
IMAGE_NAME: rock/<your-repo-name>
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
test:
|
|
||||||
runs-on: rust # or golang, or docker
|
|
||||||
steps:
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
- name: Run tests
|
|
||||||
run: cargo test --all # adjust for your language
|
|
||||||
|
|
||||||
build:
|
|
||||||
runs-on: golang
|
|
||||||
needs: test
|
|
||||||
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
|
|
||||||
container:
|
|
||||||
image: docker:27-cli
|
|
||||||
volumes:
|
|
||||||
- /docker-certs/client:/docker-certs/client:ro
|
|
||||||
env:
|
|
||||||
DOCKER_HOST: tcp://localhost:2376
|
|
||||||
DOCKER_TLS_VERIFY: "1"
|
|
||||||
DOCKER_CERT_PATH: /docker-certs/client
|
|
||||||
steps:
|
|
||||||
- name: install node (required by JS-based actions)
|
|
||||||
run: apk add --no-cache nodejs git
|
|
||||||
|
|
||||||
- uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Registry login
|
|
||||||
run: |
|
|
||||||
echo "${REGISTRY_PAT}" | docker login "${REGISTRY}" \
|
|
||||||
--username rock --password-stdin
|
|
||||||
env:
|
|
||||||
REGISTRY_PAT: ${{ secrets.REGISTRY_PAT }}
|
|
||||||
|
|
||||||
- name: Build
|
|
||||||
run: |
|
|
||||||
docker build \
|
|
||||||
-t "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest" \
|
|
||||||
-t "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}" \
|
|
||||||
.
|
|
||||||
|
|
||||||
- name: Push
|
|
||||||
run: |
|
|
||||||
docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest"
|
|
||||||
docker push "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.sha }}"
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Apply to Poimen Repos
|
|
||||||
|
|
||||||
### poimen-memory ✅ (current)
|
|
||||||
- Status: Uses `FORGEJO_TOKEN` (built-in)
|
|
||||||
- Can upgrade to `REGISTRY_PAT` pattern
|
|
||||||
|
|
||||||
### poimen (orchestrator)
|
|
||||||
- If has Dockerfile: add workflow
|
|
||||||
- If K8s-only: validate with `yamllint` + `kustomize`
|
|
||||||
|
|
||||||
### poimen-workflows
|
|
||||||
- If has Docker: add workflow
|
|
||||||
- Otherwise: validate YAML only
|
|
||||||
|
|
||||||
### Pattern for All Repos
|
|
||||||
|
|
||||||
```
|
|
||||||
.forgejo/workflows/
|
|
||||||
├── build.yaml # For repos with Dockerfile
|
|
||||||
├── validate.yaml # For K8s-only repos (like homelab)
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Summary
|
|
||||||
|
|
||||||
**Established Pattern**:
|
|
||||||
1. `REGISTRY_PAT` secret in repo
|
|
||||||
2. `docker login` → `docker build` → `docker push`
|
|
||||||
3. Image tagged: `latest` + commit SHA
|
|
||||||
4. ArgoCD watches and auto-deploys
|
|
||||||
|
|
||||||
**Once set up once**:
|
|
||||||
- Every push triggers build
|
|
||||||
- Image auto-pushes to registry
|
|
||||||
- ArgoCD syncs automatically
|
|
||||||
- Zero manual intervention
|
|
||||||
|
|
||||||
**Effort**: ~5 minutes per repo (token + secret + workflow file)
|
|
||||||
@@ -1,76 +0,0 @@
|
|||||||
name: Build and Push
|
|
||||||
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: [main]
|
|
||||||
pull_request:
|
|
||||||
branches: [main]
|
|
||||||
|
|
||||||
env:
|
|
||||||
REGISTRY: forgejo.riotpiao.com
|
|
||||||
IMAGE: forgejo.riotpiao.com/rock/poimen-memory
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
test:
|
|
||||||
name: Test
|
|
||||||
runs-on: docker
|
|
||||||
container:
|
|
||||||
image: rust:1.81-bookworm
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Run tests
|
|
||||||
run: |
|
|
||||||
echo "Building and testing..."
|
|
||||||
cargo test --all --quiet
|
|
||||||
echo "✅ Tests passed"
|
|
||||||
|
|
||||||
- name: Check formatting
|
|
||||||
run: cargo fmt --all -- --check
|
|
||||||
|
|
||||||
- name: Run clippy
|
|
||||||
run: cargo clippy --all -- -D warnings
|
|
||||||
|
|
||||||
build:
|
|
||||||
name: Build and Push Image
|
|
||||||
runs-on: docker
|
|
||||||
needs: test
|
|
||||||
if: github.event_name == 'push' && github.ref == 'refs/heads/main'
|
|
||||||
env:
|
|
||||||
DOCKER_HOST: unix:///var/run/docker.sock
|
|
||||||
steps:
|
|
||||||
- name: Checkout
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
|
|
||||||
- name: Get commit info
|
|
||||||
id: info
|
|
||||||
run: |
|
|
||||||
SHORT_SHA=$(git rev-parse --short HEAD)
|
|
||||||
COMMIT_MSG=$(git log -1 --pretty=%B | head -1)
|
|
||||||
echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
|
|
||||||
echo "commit_msg=${COMMIT_MSG}" >> $GITHUB_OUTPUT
|
|
||||||
echo "Build: ${SHORT_SHA} - ${COMMIT_MSG}"
|
|
||||||
|
|
||||||
- name: Docker login
|
|
||||||
run: |
|
|
||||||
echo "${{ secrets.REGISTRY_PAT }}" | docker login -u rock --password-stdin ${{ env.REGISTRY }}
|
|
||||||
|
|
||||||
- name: Build image
|
|
||||||
run: |
|
|
||||||
docker build \
|
|
||||||
--tag ${{ env.IMAGE }}:${{ steps.info.outputs.short_sha }} \
|
|
||||||
--tag ${{ env.IMAGE }}:latest \
|
|
||||||
--progress=plain \
|
|
||||||
.
|
|
||||||
echo "✅ Image built"
|
|
||||||
|
|
||||||
- name: Push image
|
|
||||||
run: |
|
|
||||||
docker push ${{ env.IMAGE }}:${{ steps.info.outputs.short_sha }}
|
|
||||||
docker push ${{ env.IMAGE }}:latest
|
|
||||||
echo "✅ Image pushed"
|
|
||||||
|
|
||||||
- name: Cleanup
|
|
||||||
if: always()
|
|
||||||
run: docker logout ${{ env.REGISTRY }} || true
|
|
||||||
Reference in New Issue
Block a user