create a meta file to execute sub roles. Remove / add blank lines at the end. Add mock

ansible.cfg

@@ -18,4 +18,4 @@ become_method = sudo
 # -o ControlPersist=60s
 # Sets the persistence time for the master connection to 60 seconds
 [ssh_connection]
-ssh_args = -o ControlMaster=auto -o ControlPersist=60s
+ssh_args = -o ControlMaster=auto -o ControlPersist=60s

inventory.ini

@@ -1,6 +1,6 @@
 # This file defines targets (hosts, groups, host-specific variables)
 [all]
-rocky10 ansible_host=10.17.3.36 ansible_user=groot ansible_become=true
+192.168.1.12 ansible_user=groot ansible_become=true ansible_python_interpreter=/usr/bin/python3
 
 [gitrunner]
-rocky10
+192.168.1.12

main.yml

@@ -0,0 +1,10 @@
+---
+- name: Deploy and configure a runner on target machine
+  hosts: gitrunner
+  become: true
+  gather_facts: true
+
+  roles:
+    - update.yml
+    - host_setup.yml
+    - runner_setup.yml

readme.md

@@ -1,30 +1,31 @@
 # Gitea Runner Automation with Ansible
 
-This repository contains an Ansible playbook and configuration files to automate the deployment and configuration of a Gitea Runner on a Rocky Linux 10 VM. 
+This repository contains an Ansible playbook and configuration files to automate the deployment and configuration of a Gitea Runner on a Fedora Rawhide Cloud VM. 
 
-To deploy a Rocky Linux virtual machine, please go to [this repository](https://git.phyllo.me/IaC/advanced-libvirt-terraform-examples). 
+To deploy a Fedora Rawhide Cloud virtual machine, please go to [this repository](https://git.phyllo.me/IaC/advanced-libvirt-terraform-examples). 
 
 ## Repository Structure
 
 ```
-.
+├── ansible.cfg # Ansible configuration settings 
-├── ansible.cfg          # Ansible configuration settings
+├── inventory.ini # Host inventory definition 
-├── inventory.ini        # Host inventory definition
+├── setup.yml # Main playbook for basic system setup 
-├── setup.yml            # Main playbook for Gitea Runner configuration
+├── update.yml # Playbook to ensure system is up-to-date 
-├── update.yml           # Playbook to ensure system is up-to-date
+├── runner_setup.yml # Playbook for Gitea Runner installation and configuration
-
 ```
 
 ## Prerequisites
 
 1. Ansible installed on your control machine
-2. Access to a Rocky Linux 10 VM with IP `10.17.3.36`
+2. Access to a Fedora Rawhide Cloud VM with IP `10.17.3.250`
 3. SSH key authentication configured with `~/.ssh/terraform_key`
 4. Root privileges or sudo access on the target VM
+5. Gitea registration token (to be placed in runner_setup.yml)
 
 ## How to Use
 
 1. **Install Ansible** (if not already installed):
+
    ```bash
    # For CentOS/RHEL/Fedora
    sudo yum install ansible
@@ -34,35 +35,52 @@ To deploy a Rocky Linux virtual machine, please go to [this repository](https://
    ```
 
 2. **Ensure SSH key exists**:
-   ```bash
+
+   ```
    ls ~/.ssh/terraform_key
    ```
 
-3. **Run the playbook**:
+3. **Set registration token in runner_setup.yml**:
-   ```bash
+
-   ansible-playbook site.yml
+   ```
+   registration_token: "your_actual_token_here"
+   ``` 
+
+> Obtain the token from: https://git.phyllo.me/user/settings/actions/runners
+
+> For a runner to have the global scope, one needs to generate a token with a Gitea superuser 
+
+4. **Run the playbooks**:
+
+   ```
+   ansible-playbook update.yml
+   ansible-playbook setup.yml
+   ansible-playbook runner_setup.yml
    ```
 
 ## What This Does
 
 This automation will:
-1. Connect to the specified Rocky Linux VM
-2. Update the system packages
-3. Install necessary dependencies (git)
-4. Create a dedicated gitea-runner user
-5. Set hostname to rocky10
-6. Download and install Gitea Runner v0.2.13
-7. Configure systemd service for automatic startup
-8. Start the Gitea Runner service
 
-The result is a fully configured Gitea Runner that will automatically start on system boot, ready to execute Gitea Actions workflows.
+- Connect to the specified Fedora Rawhide Cloud VM
+- Update the system packages and reboot if required
+- Install necessary dependencies
+- Set hostname to fedora-rawhide10
+- Create a dedicated gitea-runner user
+- Download and install Gitea Runner
+- Configure systemd service for automatic startup
+- Register the runner with Gitea using the provided token
+- Start the Gitea Runner service
+- The result is a fully configured Gitea Runner that will automatically start on system boot, ready to execute Gitea Actions workflows.
 
 ## Troubleshooting
 
 If you encounter issues:
+
 - Verify SSH connectivity to the target VM
 - Ensure Ansible can reach the specified IP address
-- Check that `~/.ssh/terraform_key` has correct permissions
+- Check that ~/.ssh/terraform_key has correct permissions (600)
 - Review output logs for specific error messages
+- Make sure the registration token is valid
 
-For additional help with Ansible configuration, consult the [official Ansible documentation](https://docs.ansible.com/ansible/latest/index.html).
+For additional help with Ansible configuration, consult the official Ansible documentation.

roles/host-as-runner-config.yml

@@ -0,0 +1,91 @@
+---
+- name: More advanced setup, to use host itself as runner
+  hosts: gitrunner
+  become: true
+  gather_facts: true
+
+  tasks:
+    - name: Ensure required repositories are enabled
+      ansible.builtin.dnf:
+        name:
+          - dnf-plugins-core
+        state: present
+        update_cache: true
+
+    - name: Install required packages with error handling
+      ansible.builtin.dnf:
+        name:
+          - mock
+          - anaconda
+          - lorax
+          - make
+          - git
+          - gcc
+          - gcc-c++
+          - cmake
+          - clang
+          - clang-tools-extra
+          - python3
+          - python3-pip
+          - python3-devel
+          - python3-setuptools
+          - python3-wheel
+          - nodejs
+          - npm
+          - ruby
+          - ruby-devel
+          - rust
+          - cargo
+          - go
+          - perl
+          - perl-Module-Build
+          - perl-ExtUtils-MakeMaker
+          - gettext
+          - wget
+          - curl
+          - unzip
+          - tar
+          - gzip
+          - bzip2
+          - xz
+          - vim
+          - which
+          - procps-ng
+          - findutils
+          - coreutils
+          - diffutils
+          - patch
+          - shadow-utils
+          - util-linux
+          - grep
+          - sed
+          - bash
+          - zsh
+          - openssh-clients
+          - openssl
+          - ca-certificates
+          - libarchive
+          - libtool
+          - automake
+          - autoconf
+          - libffi-devel
+          - openssl-devel
+          - zlib-devel
+          - bison
+          - flex
+          - gdb
+          - strace
+          - ltrace
+          - valgrind
+        state: present
+        update_cache: true
+        allow_downgrade: false
+
+    - name: Clean dnf cache
+      ansible.builtin.command: dnf clean all
+      changed_when: true
+
+    - name: Remove dnf cache directory
+      ansible.builtin.file:
+        path: /var/cache/dnf
+        state: absent

roles/host_setup.yml

@@ -0,0 +1,46 @@
+---
+- name: Initial generic setup
+  hosts: gitrunner
+  become: true
+  gather_facts: true
+
+  tasks:
+    - name: Install required packages
+      ansible.builtin.dnf:
+        name:
+          - docker
+          - nodejs
+          - git
+          - mock
+        state: present
+        update_cache: true
+
+    - name: Start and enable Docker service
+      ansible.builtin.systemd:
+        name: docker
+        enabled: true
+        state: started
+
+    - name: Add current user to docker group
+      ansible.builtin.user:
+        name: "{{ item }}"
+        groups: docker
+        append: true
+      loop:
+        - "{{ ansible_user }}"
+        - act_runner
+
+    - name: Verify Docker installation
+      ansible.builtin.command: docker version
+      changed_when: true
+
+    - name: Check current hostname
+      ansible.builtin.command: hostname
+      register: current_hostname
+      changed_when: false
+
+    - name: Set hostname to configured value (if needed)
+      ansible.builtin.hostname:
+        name: act
+      when:
+        - current_hostname.stdout != "act"

roles/runner_setup.yml

@@ -0,0 +1,131 @@
+---
+- name: Initial one-time setup for the Act Runner, Gitea's Action runner
+  hosts: gitrunner
+  become: true
+  vars:
+    gitea_runner_version: "0.2.13"
+    # Token has to be generated here https://git.phyllo.me/user/settings/actions/runners and paste here, like:
+    # registration_token: "asdlkhgalsdhlgksdahklds"
+    registration_token: ""
+
+  tasks:
+    - name: Create act runner user
+      ansible.builtin.user:
+        name: "act_runner"
+        system: true
+        shell: /bin/bash
+        home: "/var/lib/act_runner"
+        create_home: true
+        state: present
+
+    - name: Create /etc/act_runner directory
+      ansible.builtin.file:
+        path: /etc/act_runner
+        state: directory
+        owner: "act_runner"
+        group: "act_runner"
+        mode: "0755"
+
+    - name: Install Act Runner
+      ansible.builtin.get_url:
+        url: "https://gitea.com/gitea/act_runner/releases/download/v{{ gitea_runner_version }}/act_runner-{{ gitea_runner_version }}-linux-amd64"
+        dest: "/usr/local/bin/act_runner"
+        mode: "0755"
+        force: "{{ (ansible_facts['cmdline']['force'] is defined) | default(false) }}"
+      retries: 3
+      delay: 5
+
+    - name: Create Act Runner configuration file
+      ansible.builtin.copy:
+        content: |
+          log:
+            level: info
+
+          runner:
+            file: "/var/lib/act_runner/.runner"
+            capacity: 4
+            timeout: 3h
+            shutdown_timeout: 0s
+            insecure: false
+            fetch_timeout: 5s
+            fetch_interval: 2s
+            github_mirror: ''
+            labels:
+              - "fedora-cloud-42:docker://git.phyllo.me/devops/fedora-runner-image:latest"
+              - "ubuntu-latest:docker://docker.gitea.com/runner-images:ubuntu-latest"
+              - "ubuntu-latest-full:docker://docker.gitea.com/runner-images:ubuntu-latest-full"
+              - "fedora-cloud-42:host"
+
+          cache:
+            enabled: true
+            dir: /var/lib/act_runner/.act-runner/actcache
+            host: ""
+            port: 0
+            external_server: ""
+
+          container:
+            network: ""
+            privileged: true
+            options:
+            workdir_parent:
+            valid_volumes: []
+            docker_host: ""
+            force_pull: true
+            force_rebuild: false
+            require_docker: false
+            docker_timeout: 0s
+
+          host:
+            workdir_parent: /var/lib/act_runner/act-runner/workdir
+
+        dest: /etc/act_runner/config.yaml
+        owner: "act_runner"
+        group: "act_runner"
+        mode: "0755"
+        backup: true
+      register: config_file
+
+    - name: Check if runner is already registered
+      ansible.builtin.stat:
+        path: /var/lib/act_runner/.runner
+      register: runner_registered
+      changed_when: false
+
+    - name: Register the runner with Gitea (if not already registered)
+      ansible.builtin.command: >
+        /usr/local/bin/act_runner register  --no-interactive
+        --config /etc/act_runner/config.yaml  --instance https://git.phyllo.me  --token {{ registration_token }}
+        --name fedora-bios-0
+      when: not runner_registered.stat.exists
+      changed_when: true
+      notify: restart act runner service
+
+    - name: Create Act Runner service file
+      ansible.builtin.copy:
+        content: |
+          [Unit]
+          Description=Gitea Actions Runner
+          Documentation=https://gitea.com/gitea/act_runner
+          After=network.target
+
+          [Service]
+          ExecStart=/usr/local/bin/act_runner daemon --config /etc/act_runner/config.yaml
+          ExecReload=/bin/kill -s HUP $MAINPID
+          WorkingDirectory=/var/lib/act_runner
+          TimeoutSec=0
+          Restart=always
+          RestartSec=10
+
+          [Install]
+          WantedBy=multi-user.target
+        dest: /etc/systemd/system/act_runner.service
+        mode: "0644"
+        backup: true
+      notify: restart act runner service
+
+    - name: Ensure act_runner service is enabled and started
+      ansible.builtin.systemd:
+        name: act_runner
+        enabled: true
+        state: started
+        daemon_reload: true

roles/update.yml

@@ -0,0 +1,25 @@
+---
+- name: Update system packages
+  hosts: gitrunner
+  become: true
+
+  tasks:
+    - name: Update system packages
+      ansible.builtin.dnf:
+        name: "*"
+        state: latest
+        update_cache: true
+
+    - name: Check if reboot required (RedHat/CentOS)
+      ansible.builtin.command: needs-restarting -r
+      register: needs_restarting_output
+      changed_when: false
+      ignore_errors: true
+      when: ansible_os_family == "RedHat"
+
+    - name: Reboot if required (RedHat/CentOS)
+      ansible.builtin.reboot:
+      when:
+        - ansible_os_family == "RedHat"
+        - needs_restarting_output.rc == 1
+        - needs_restarting_output is defined

setup.yml

@@ -1,60 +0,0 @@
----
-- name: Initial one-time setup
-  hosts: gitrunner
-  become: yes
-  vars:
-    runner_name: "gitea-runner"
-    gitea_runner_version: "0.2.13"
-    
-  tasks:
-    - name: Install required packages
-      yum:
-        name:
-          - git
-        state: present
-
-    - name: Create gitea runner user
-      user:
-        name: "{{ runner_name }}"
-        system: yes
-        shell: /bin/bash
-        home: "/var/lib/{{ runner_name }}"
-        create_home: yes
-
-    - name: Set hostname to rocky10
-      hostname:
-        name: rocky10
-
-    - name: Install Gitea Runner
-      uri:
-        url: "https://gitea.com/gitea/act_runner/releases/download/v{{ gitea_runner_version }}/act_runner-{{ gitea_runner_version }}-linux-amd64"
-        dest: "/usr/local/bin/gitea-runner"
-        mode: '0755'
-        status_code: 200
-        follow_redirects: all
-
-    - name: Create Gitea Runner service file
-      copy:
-        content: |
-          [Unit]
-          Description=Gitea Runner
-          After=network.target
-          
-          [Service]
-          Type=simple
-          User={{ runner_name }}
-          ExecStart=/usr/local/bin/gitea-runner
-          Restart=always
-          RestartSec=10
-          
-          [Install]
-          WantedBy=multi-user.target
-        dest: /etc/systemd/system/gitea-runner.service
-        mode: '0644'
-
-    - name: Ensure gitea-runner service is enabled and started
-      systemd:
-        name: gitea-runner
-        enabled: yes
-        state: started
-        daemon_reload: yes

update.yml

@@ -1,17 +0,0 @@
----
-- name: Update system packages
-  hosts: gitrunner
-  become: yes
-  
-  tasks:
-    - name: Update system packages
-      yum:
-        name: "*"
-        state: latest
-        update_cache: yes
-    
-    - name: Force reboot after updates (safe for Rocky Linux)
-      reboot:
-        msg: "System reboot after package updates"
-        post_reboot_delay: 10
-        timeout: 300