Sign in

Search issue titles and bodies, change requests and comments. Private repositories you cannot read are not included.

vole
Clone

Read only, no credentials:

https://rodent.software/git/vole.git

Write over SSH with a registered key:

git clone ssh://git@0.0.0.0:2222/vole.git

A free and open-source forge that lives in your Git repo.

Blame · packaging/runner.env

Line attribution on main · 39 line(s)

d0d4239f
Keenan Nemetz
3d ago
1 # Arguments for vole-runner.service. One line, read by systemd and split at
2 # spaces, so it is written the way the command would be typed.
3 #
4 # The packages install this file with the arguments commented out, so enabling
5 # vole-runner without editing it fails with a message saying so.
6 #
7 # Start from this example and keep what applies:
8 #
9 # --remote the instance to lease jobs from. Required.
10 # --container-runtime docker, podman, or nerdctl. Rootless podman is
11 # preferred; see docs/runner.md.
12 # --container-network none (the default) or bridge. A machine without a
13 # network never receives a job that asks for one, and a
14 # job that fetches dependencies needs bridge.
4e3759da
Keenan Nemetz
48m ago
15 # --container-memory what one job may take from RAM, e.g. 4G. Set it: the
16 # runtime's default is the whole machine, and --jobs
17 # multiplies it. Size the machine for --jobs times this.
18 # --container-pids processes one container may have (default 2048).
19 # --container-tmpfs size of the job's /tmp (default 1G). It is a tmpfs, so
20 # it is memory; raise it for a build that writes large
21 # temporary files.
22 # --container-cpus optional CPU cap for one job, e.g. 2.
23 # --disk-reserve free space to keep under --dir (default 2G). A job that
24 # takes the filesystem below it is stopped while it runs,
25 # because a job tree is a host directory with no quota.
d0d4239f
Keenan Nemetz
3d ago
26 # --label what this machine is, such as linux or arm64. A job
27 # with runs-on only comes to a runner carrying every
28 # label it asks for.
29 # --dir where checkouts and the cache live.
30 # --known-hosts the file holding the instance's SSH host key. Populate
31 # it once with ssh-keyscan; the runner executes
32 # repository code, so the instance it trusts is a
33 # security boundary.
34 # --repos narrow this machine to named repositories.
18c559ea
Keenan Nemetz
2d ago
35 # --jobs how many jobs to run at once (default 1). Each job
36 # gets its own container, so size the machine for this
37 # many times the container limits.
d0d4239f
Keenan Nemetz
3d ago
38 #
4e3759da
Keenan Nemetz
48m ago
39 # VOLE_RUNNER_ARGS=--remote ssh://git@forge.example.com:2222 --container-runtime podman --container-network bridge --container-memory 4G --container-tmpfs 1G --disk-reserve 2G --dir /var/lib/vole-runner --known-hosts /etc/vole/runner_known_hosts --label linux