Update forgejo-runner

2025-01-10 20:47:17 +01:00 · 2025-01-10 20:47:17 +01:00 · 585d152b62
commit 585d152b62
parent 5e883d57be
5 changed files with 11 additions and 1 deletions
--- a/container-config/caddy/Caddyfile
+++ b/container-config/caddy/Caddyfile
@ -34,6 +34,11 @@ strypsteen.me {
  {"m.server": "matrix.strypsteen.com:443"}
  EOF
 }
+strypsteen.com {
+  import base
+  import tls
+  respond 404
+}
 auth.strypsteen.com {
  import base
  import tls
--- a/sandbox/etc/containers/containers.conf.d/sandbox.conf
+++ b/sandbox/etc/containers/containers.conf.d/sandbox.conf
@ -0,0 +1,2 @@
+[containers]
+userns="host"
--- a/sandbox/etc/containers/systemd/browserless.container
+++ b/sandbox/etc/containers/systemd/browserless.container
@ -1,5 +1,6 @@
 [Container]
 Image=ghcr.io/browserless/chromium
+UserNS=auto
 Tmpfs=/home/blessuser:mode=1777
 Environment=DEBUG=-*
 PublishPort=3000:3000
--- a/sandbox/etc/containers/systemd/code-server.container
+++ b/sandbox/etc/containers/systemd/code-server.container
@ -1,5 +1,6 @@
 [Container]
 Image=git.strypsteen.com/infra/code-server
+UserNS=auto
 ReadOnly=false
 AddDevice=/dev/kvm
 AddDevice=/dev/net/tun
--- a/sandbox/etc/containers/systemd/forgejo-runner.container
+++ b/sandbox/etc/containers/systemd/forgejo-runner.container
@ -1,7 +1,8 @@
 [Service]
 Restart=on-failure
 [Container]
-Image=code.forgejo.org/forgejo/runner:5
+Image=code.forgejo.org/forgejo/runner:6
+UserNS=auto
 SecurityLabelDisable=true
 Exec=forgejo-runner daemon -c /etc/forgejo-runner/config.yaml
 Volume=/run/podman:/run/podman:U