Update to Fedora Rawhide, make act_runner name consistent, change file where runner registration data is tored

ansible.cfg

@@ -18,4 +18,4 @@ become_method = sudo
 # -o ControlPersist=60s
 # Sets the persistence time for the master connection to 60 seconds
 [ssh_connection]
-ssh_args = -o ControlMaster=auto -o ControlPersist=60s
+ssh_args = -o ControlMaster=auto -o ControlPersist=60s

host_setup.yml

@@ -0,0 +1,22 @@
+- name: Initial generic setup
+  hosts: gitrunner
+  become: yes
+    
+  tasks:
+    - name: Install required packages
+      yum:
+        name:
+          - git
+          - nodejs
+          - mock
+        state: present
+
+    - name: Check current hostname
+      command: hostname
+      register: current_hostname
+      changed_when: false
+
+    - name: Set hostname to configured value (if needed)
+      hostname:
+        name: fedora-rawhide10
+      when: current_hostname.stdout != ansible_hostname

inventory.ini

@@ -1,6 +1,3 @@
 # This file defines targets (hosts, groups, host-specific variables)
 [all]
-rocky10 ansible_host=10.17.3.36 ansible_user=groot ansible_become=true
-
-[gitrunner]
-rocky10
+fedora-rawhide10 ansible_host=10.17.3.179 ansible_user=groot ansible_become=true ansible_python_interpreter=/usr/bin/python3.12

readme.md

@@ -1,30 +1,31 @@
 # Gitea Runner Automation with Ansible
 
-This repository contains an Ansible playbook and configuration files to automate the deployment and configuration of a Gitea Runner on a Rocky Linux 10 VM. 
+This repository contains an Ansible playbook and configuration files to automate the deployment and configuration of a Gitea Runner on a Fedora Rawhide Cloud VM. 
 
-To deploy a Rocky Linux virtual machine, please go to [this repository](https://git.phyllo.me/IaC/advanced-libvirt-terraform-examples). 
+To deploy a Fedora Rawhide Cloud virtual machine, please go to [this repository](https://git.phyllo.me/IaC/advanced-libvirt-terraform-examples). 
 
 ## Repository Structure
 
 ```
-.
-├── ansible.cfg          # Ansible configuration settings
-├── inventory.ini        # Host inventory definition
-├── setup.yml            # Main playbook for Gitea Runner configuration
-├── update.yml           # Playbook to ensure system is up-to-date
-
+├── ansible.cfg # Ansible configuration settings 
+├── inventory.ini # Host inventory definition 
+├── setup.yml # Main playbook for basic system setup 
+├── update.yml # Playbook to ensure system is up-to-date 
+├── runner_setup.yml # Playbook for Gitea Runner installation and configuration
 ```
 
 ## Prerequisites
 
 1. Ansible installed on your control machine
-2. Access to a Rocky Linux 10 VM with IP `10.17.3.36`
+2. Access to a Fedora Rawhide Cloud VM with IP `10.17.3.250`
 3. SSH key authentication configured with `~/.ssh/terraform_key`
 4. Root privileges or sudo access on the target VM
+5. Gitea registration token (to be placed in runner_setup.yml)
 
 ## How to Use
 
 1. **Install Ansible** (if not already installed):
+
    ```bash
    # For CentOS/RHEL/Fedora
    sudo yum install ansible
@@ -34,35 +35,52 @@ To deploy a Rocky Linux virtual machine, please go to [this repository](https://
    ```
 
 2. **Ensure SSH key exists**:
-   ```bash
+
+   ```
    ls ~/.ssh/terraform_key
    ```
 
-3. **Run the playbook**:
-   ```bash
-   ansible-playbook site.yml
+3. **Set registration token in runner_setup.yml**:
+
+   ```
+   registration_token: "your_actual_token_here"
+   ``` 
+
+> Obtain the token from: https://git.phyllo.me/user/settings/actions/runners
+
+> For a runner to have the global scope, one needs to generate a token with a Gitea superuser 
+
+4. **Run the playbooks**:
+
+   ```
+   ansible-playbook update.yml
+   ansible-playbook setup.yml
+   ansible-playbook runner_setup.yml
    ```
 
 ## What This Does
 
 This automation will:
-1. Connect to the specified Rocky Linux VM
-2. Update the system packages
-3. Install necessary dependencies (git)
-4. Create a dedicated gitea-runner user
-5. Set hostname to rocky10
-6. Download and install Gitea Runner v0.2.13
-7. Configure systemd service for automatic startup
-8. Start the Gitea Runner service
 
-The result is a fully configured Gitea Runner that will automatically start on system boot, ready to execute Gitea Actions workflows.
+- Connect to the specified Fedora Rawhide Cloud VM
+- Update the system packages and reboot if required
+- Install necessary dependencies
+- Set hostname to fedora-rawhide10
+- Create a dedicated gitea-runner user
+- Download and install Gitea Runner
+- Configure systemd service for automatic startup
+- Register the runner with Gitea using the provided token
+- Start the Gitea Runner service
+- The result is a fully configured Gitea Runner that will automatically start on system boot, ready to execute Gitea Actions workflows.
 
 ## Troubleshooting
 
 If you encounter issues:
+
 - Verify SSH connectivity to the target VM
 - Ensure Ansible can reach the specified IP address
-- Check that `~/.ssh/terraform_key` has correct permissions
+- Check that ~/.ssh/terraform_key has correct permissions (600)
 - Review output logs for specific error messages
+- Make sure the registration token is valid
 
-For additional help with Ansible configuration, consult the [official Ansible documentation](https://docs.ansible.com/ansible/latest/index.html).
+For additional help with Ansible configuration, consult the official Ansible documentation.

runner_setup.yml

@@ -0,0 +1,185 @@
+---
+- name: Initial one-time setup for the Act Runner, Gitea's Action runner
+  hosts: gitrunner
+  become: yes
+  vars:    
+    gitea_runner_version: "0.2.13"
+    # Token has to be generated here https://git.phyllo.me/user/settings/actions/runners and paste here, like:
+    # registration_token: "asdlkhgalsdhlgksdahklds"
+    registration_token: ""
+    
+  tasks:
+    - name: Create act runner user
+      ansible.builtin.user:
+        name: "act_runner"
+        system: yes
+        shell: /bin/bash
+        home: "/var/lib/act_runner"
+        create_home: yes
+        state: present
+
+    - name: Create /etc/act_runner directory
+      ansible.builtin.file:
+        path: /etc/act_runner
+        state: directory
+        owner: "act_runner"
+        group: "act_runner"
+        mode: '0755'
+
+    - name: Install Act Runner
+      ansible.builtin.get_url:
+        url: "https://gitea.com/gitea/act_runner/releases/download/v{{ gitea_runner_version }}/act_runner-{{ gitea_runner_version }}-linux-amd64"
+        dest: "/usr/local/bin/act_runner"
+        mode: '0755'
+        force: "{{ (ansible_facts['cmdline']['force'] is defined) | default(false) }}"
+      retries: 3
+      delay: 5
+
+    - name: Create Act Runner configuration file
+      ansible.builtin.copy:
+        content: |
+          log:
+            # The level of logging, can be trace, debug, info, warn, error, fatal
+            level: info
+
+          runner:
+            # Where to store the registration result.
+            file: /var/lib/act_runner/.runner
+            # Execute how many tasks concurrently at the same time.
+            capacity: 1
+            # Extra environment variables to run jobs.
+            #envs:
+            #  A_TEST_ENV_NAME_1: a_test_env_value_1
+            #  A_TEST_ENV_NAME_2: a_test_env_value_2
+            # Extra environment variables to run jobs from a file.
+            # It will be ignored if it's empty or the file doesn't exist.
+            env_file: .env
+            # The timeout for a job to be finished.
+            # Please note that the Gitea instance also has a timeout (3h by default) for the job.
+            # So the job could be stopped by the Gitea instance if it's timeout is shorter than this.
+            timeout: 1h
+            # The timeout for the runner to wait for running jobs to finish when shutting down.
+            # Any running jobs that haven't finished after this timeout will be cancelled.
+            shutdown_timeout: 0s
+            # Whether skip verifying the TLS certificate of the Gitea instance.
+            insecure: false
+            # The timeout for fetching the job from the Gitea instance.
+            fetch_timeout: 5s
+            # The interval for fetching the job from the Gitea instance.
+            fetch_interval: 2s
+            # The labels of a runner are used to determine which jobs the runner can run, and how to run them.
+            # Like: "macos-arm64:host" or "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
+            # Find more images provided by Gitea at https://gitea.com/docker.gitea.com/runner-images .
+            # If it's empty when registering, it will ask for inputting labels.
+            # If it's empty when execute `daemon`, will use labels in `.runner` file.
+            labels:
+              - "fedora-rawhide-latest:host:local"
+
+          cache:
+            # Enable cache server to use actions/cache.
+            enabled: true
+            # The directory to store the cache data.
+            # If it's empty, the cache data will be stored in $HOME/.cache/actcache.
+            dir: ""
+            # The host of the cache server.
+            # It's not for the address to listen, but the address to connect from job containers.
+            # So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
+            host: ""
+            # The port of the cache server.
+            # 0 means to use a random available port.
+            port: 0
+            # The external cache server URL. Valid only when enable is true.
+            # If it's specified, act_runner will use this URL as the ACTIONS_CACHE_URL rather than start a server by itself.
+            # The URL should generally end with "/".
+            external_server: ""
+
+          container:
+            # Specifies the network to which the container will connect.
+            # Could be host, bridge or the name of a custom network.
+            # If it's empty, act_runner will create a network automatically.
+            network: ""
+            # Whether to use privileged mode or not when launching task containers (privileged mode is required for Docker-in-Docker).
+            privileged: false
+            # And other options to be used when the container is started (eg, --add-host=my.gitea.url:host-gateway).
+            options:
+            # The parent directory of a job's working directory.
+            # NOTE: There is no need to add the first '/' of the path as act_runner will add it automatically. 
+            # If the path starts with '/', the '/' will be trimmed.
+            # For example, if the parent directory is /path/to/my/dir, workdir_parent should be path/to/my/dir
+            # If it's empty, /workspace will be used.
+            workdir_parent:
+            # Volumes (including bind mounts) can be mounted to containers. Glob syntax is supported, see https://github.com/gobwas/glob
+            # You can specify multiple volumes. If the sequence is empty, no volumes can be mounted.
+            # For example, if you only allow containers to mount the `data` volume and all the json files in `/src`, you should change the config to:
+            # valid_volumes:
+            #   - data
+            #   - /src/*.json
+            # If you want to allow any volume, please use the following configuration:
+            # valid_volumes:
+            #   - '**'
+            valid_volumes: []
+            # overrides the docker client host with the specified one.
+            # If it's empty, act_runner will find an available docker host automatically.
+            # If it's "-", act_runner will find an available docker host automatically, but the docker host won't be mounted to the job containers and service containers.
+            # If it's not empty or "-", the specified docker host will be used. An error will be returned if it doesn't work.
+            docker_host: ""
+            # Pull docker image(s) even if already present
+            force_pull: true
+            # Rebuild docker image(s) even if already present
+            force_rebuild: false
+
+          host:
+            # The parent directory of a job's working directory.
+            # If it's empty, $HOME/.cache/act/ will be used.
+            workdir_parent:
+        dest: /etc/act_runner/config.yaml
+        owner: "act_runner"
+        group: "act_runner"
+        mode: '0755'
+        backup: yes
+
+    - name: Check if runner is already registered
+      ansible.builtin.stat:
+        path: /var/lib/act_runner/.runner
+      register: runner_registered
+      changed_when: false
+
+    - name: Register the runner with Gitea (if not already registered)
+      ansible.builtin.command: >
+        /usr/local/bin/act_runner register 
+        --no-interactive
+        --config /etc/act_runner/config.yaml 
+        --instance https://git.phyllo.me 
+        --token {{ registration_token }}
+        --name fraw-bios-0
+      when: not runner_registered.stat.exists
+      changed_when: true
+
+    - name: Create Act Runner service file
+      ansible.builtin.copy:
+        content: |
+          [Unit]
+          Description=Gitea Actions Runner
+          Documentation=https://gitea.com/gitea/act_runner
+          After=network.target
+          
+          [Service]
+          ExecStart=/usr/local/bin/act_runner daemon --config /etc/act_runner/config.yaml
+          ExecReload=/bin/kill -s HUP $MAINPID
+          WorkingDirectory=/var/lib/act_runner
+          TimeoutSec=0
+          Restart=always
+          RestartSec=10
+          
+          [Install]
+          WantedBy=multi-user.target
+        dest: /etc/systemd/system/act_runner.service
+        mode: '0755'
+        backup: yes
+
+    - name: Ensure act_runner service is enabled and started
+      ansible.builtin.systemd:
+        name: act_runner
+        enabled: yes
+        state: started
+        daemon_reload: yes

setup.yml

@@ -1,60 +0,0 @@
----
-- name: Initial one-time setup
-  hosts: gitrunner
-  become: yes
-  vars:
-    runner_name: "gitea-runner"
-    gitea_runner_version: "0.2.13"
-    
-  tasks:
-    - name: Install required packages
-      yum:
-        name:
-          - git
-        state: present
-
-    - name: Create gitea runner user
-      user:
-        name: "{{ runner_name }}"
-        system: yes
-        shell: /bin/bash
-        home: "/var/lib/{{ runner_name }}"
-        create_home: yes
-
-    - name: Set hostname to rocky10
-      hostname:
-        name: rocky10
-
-    - name: Install Gitea Runner
-      uri:
-        url: "https://gitea.com/gitea/act_runner/releases/download/v{{ gitea_runner_version }}/act_runner-{{ gitea_runner_version }}-linux-amd64"
-        dest: "/usr/local/bin/gitea-runner"
-        mode: '0755'
-        status_code: 200
-        follow_redirects: all
-
-    - name: Create Gitea Runner service file
-      copy:
-        content: |
-          [Unit]
-          Description=Gitea Runner
-          After=network.target
-          
-          [Service]
-          Type=simple
-          User={{ runner_name }}
-          ExecStart=/usr/local/bin/gitea-runner
-          Restart=always
-          RestartSec=10
-          
-          [Install]
-          WantedBy=multi-user.target
-        dest: /etc/systemd/system/gitea-runner.service
-        mode: '0644'
-
-    - name: Ensure gitea-runner service is enabled and started
-      systemd:
-        name: gitea-runner
-        enabled: yes
-        state: started
-        daemon_reload: yes

update.yml

@@ -8,10 +8,18 @@
       yum:
         name: "*"
         state: latest
-        update_cache: yes
+        update_cache: yes  
     
-    - name: Force reboot after updates (safe for Rocky Linux)
+    - name: Check if reboot required (RedHat/CentOS)
+      command: needs-restarting -r
+      register: needs_restarting_output
+      changed_when: false
+      ignore_errors: true
+      when: ansible_os_family == "RedHat"
+    
+    - name: Reboot if required (RedHat/CentOS)
       reboot:
-        msg: "System reboot after package updates"
-        post_reboot_delay: 10
-        timeout: 300
+      when: 
+        - ansible_os_family == "RedHat"
+        - needs_restarting_output.rc == 1
+        - needs_restarting_output is defined