Commit 9db5e874e1

9db5e874e10445e0dcd2dba0a281c57410f2fbb7

parent: 97d8bd46e4

Verified · cmc ci/build: success ci/test: success

cmc <hello@cleberg.net> · 2026-09-11 01:33 UTC

deploy: Containerfile.ci comment stages the file before podman build

su - cannot read root's stdin and does not share root's /tmp.
deploy/Containerfile.ci +7 −3
@@ -2,10 +2,14 @@
22# (#144). Without it a job runs in the runner's default image, which has
33# no toolchain, and the suite's prerequisite check fails immediately.
44#
5# Build it on the runner host, where podman keeps it:
5# Build it on the runner host, where podman keeps it. The file is staged in
6# the runner user's home first: a login shell under su cannot read root's
7# stdin, and root's session does not share /tmp with it.
68#
7# ssh -p 2222 root@bay1 'su - ci-runner -s /bin/sh -c \
8# "podman build -t localhost/gitbay-ci:2 -f - ." ' < deploy/Containerfile.ci
9# scp -P 2222 deploy/Containerfile.ci root@gitbay.org:/var/lib/gitbay-runner/gitbay-ci.Containerfile
10# ssh -p 2222 root@gitbay.org 'chown ci-runner /var/lib/gitbay-runner/gitbay-ci.Containerfile \
11# && su - ci-runner -s /bin/sh -c "podman build -t localhost/gitbay-ci:2 -f gitbay-ci.Containerfile ." \
12# && rm /var/lib/gitbay-runner/gitbay-ci.Containerfile'
913#
1014# Tagged, not :latest, so a change to this file is a deliberate bump in
1115# .gitbay/ci.yml rather than a silent change under a running branch.