fix: execute as user gitea-runner

.gitea/workflows/ansible-linters.yaml

@@ -11,7 +11,7 @@ jobs:
   ansible-lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.1
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
     - name: Run ansible-lint
       uses: ansible/ansible-lint@v25.12.2
       with:

.gitea/workflows/markdown-linters.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on:
     - ubuntu-latest
     steps:
-    - uses: actions/checkout@v6.0.1
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-    - uses: DavidAnson/markdownlint-cli2-action@v21.0.0
+    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
       with:
         globs: '**/*.md'

README.md

@@ -95,6 +95,7 @@ Found roles matching your search:
 | `gitea_runner_config.container.require_docker` | Always require a reachable docker daemon                                         | `false`                                                                                                                                                                                                           |
 | `gitea_runner_config.container.docker_timeout` | Timeout to wait for the docker daemon to be reachable                            | `0s`                                                                                                                                                                                                              |
 | `gitea_runner_config.host.workdir_parent`      | The parent directory of a job's working directory                                | `nil`                                                                                                                                                                                                             |
+| `gitea_runner_unix_extra_groups`               | List of additional unix groups to append the executing gitea-runner user to.     | `[]`                                                                                                                                                                                                              |
 | `gitea_runner_gitea_url`                       | The URL of the Gitea instance                                                    | `""`                                                                                                                                                                                                              |
 | `gitea_runner_token`                           | The registration token for the gitea_runner                                      | `""`                                                                                                                                                                                                              |
 

defaults/main.yaml

@@ -75,6 +75,10 @@ gitea_runner_config:
     ## @param gitea_runner_config.host.workdir_parent The parent directory of a job's working directory
     workdir_parent:
 
+## @param gitea_runner_unix_extra_groups List of additional unix groups to append the executing gitea-runner user to.
+gitea_runner_unix_extra_groups: []
+# - docker
+
 ## @param gitea_runner_gitea_url The URL of the Gitea instance
 gitea_runner_gitea_url: ""
 

package.json

@@ -1,6 +1,6 @@
 {
-  "name": "act-runner-ansible-role",
+  "name": "gitea-runner-ansible-role",
-  "homepage": "https://git.cryptic.systems/volker.raschek/act-runner-ansible-role.git",
+  "homepage": "https://git.cryptic.systems/volker.raschek/gitea-runner-ansible-role.git",
   "license": "MIT",
   "private": true,
   "engineStrict": true,

tasks/main.yaml

@@ -25,9 +25,8 @@
   register: _gitea_check
   failed_when: _gitea_check.status is not defined or _gitea_check.status >= 400
 
-- name: Install gitea_runner and dependencies
+- name: Install gitea-runner and dependencies
-  when:
+  when: ansible_facts['distribution'] == 'Archlinux'
-  - ansible_facts['distribution'] == 'Archlinux'
   block:
   - name: Update package cache
     community.general.pacman:
@@ -38,22 +37,28 @@
       state: present
     with_items: "{{ gitea_runner_package_names }}"
 
-- name: Create gitea_runner config directory
+- name: Add unix user to further groups
+  ansible.builtin.user:
+    name: "{{ gitea_runner_unix_user }}"
+    groups: "{{ gitea_runner_unix_groups + gitea_runner_unix_extra_groups }}"
+    append: true
+
+- name: Create gitea-runner config directory
   ansible.builtin.file:
     path: "{{ gitea_runner_config_file | dirname }}"
     state: directory
     mode: "0755"
 
-- name: Template gitea_runner config file
+- name: Template gitea-runner config file
   ansible.builtin.template:
-    src: etc/gitea_runner/config.yaml.j2
+    src: etc/gitea-runner/config.yaml.j2
     dest: "{{ gitea_runner_config_file }}"
     owner: "{{ gitea_runner_unix_user }}"
     group: "{{ gitea_runner_unix_group }}"
     mode: "0644"
   notify: Restart gitea_runner
 
-- name: Create gitea_runner lib directory
+- name: Create gitea-runner lib directory
   ansible.builtin.file:
     path: "{{ gitea_runner_lib_dir }}"
     owner: "{{ gitea_runner_unix_user }}"
@@ -61,14 +66,16 @@
     mode: "0755"
     state: directory
 
-- name: Check if gitea_runner is already registered
+- name: Check if gitea-runner is already registered
   ansible.builtin.stat:
     path: "{{ gitea_runner_lib_dir }}/.runner"
   register: _gitea_runner_registration_file
 
 - name: Register gitea_runner
+  become: true
+  become_user: "{{ gitea_runner_unix_user }}"
   ansible.builtin.command:
-    cmd: "gitea_runner --config {{ gitea_runner_config_file }} register --instance {{ gitea_runner_gitea_url }} --no-interactive --token={{ gitea_runner_token }}"
+    cmd: "gitea-runner --config {{ gitea_runner_config_file }} register --instance {{ gitea_runner_gitea_url }} --no-interactive --token={{ gitea_runner_token }}"
     chdir: "{{ gitea_runner_lib_dir }}"
   no_log: true
   register: _gitea_runner_register_cmd
@@ -76,7 +83,7 @@
   changed_when: _gitea_runner_register_cmd.rc == 0
   when: not _gitea_runner_registration_file.stat.exists
 
-- name: Start and enable gitea_runner service
+- name: Start and enable gitea-runner service
   ansible.builtin.service:
     name: "{{ gitea_runner_service_name }}"
     state: started

vars/Archlinux.yaml

@@ -1,11 +1,12 @@
 ---
 
 gitea_runner_package_names:
-- gitea_runner
+- gitea-runner
 
-gitea_runner_service_name: gitea_runner
+gitea_runner_service_name: gitea-runner
 
-gitea_runner_unix_user: gitea_runner
+gitea_runner_unix_user: gitea-runner
-gitea_runner_unix_group: gitea_runner
+gitea_runner_unix_group: gitea-runner
+gitea_runner_unix_groups: []
 
-gitea_runner_lib_dir: /var/lib/gitea_runner
+gitea_runner_lib_dir: /var/lib/gitea-runner