Hey everyone,

I just set up a self-hosted GitHub Actions runner in my homelab and wrote about it in my self-hosted blog! This is my second blog entry, so I would really appreciate any feedback or suggestions to help improve my writing is more than welcome.

You can check out the post here: https://cachaza.cc/blog/02-self-hosted-ci-cd

  • Selfhoster1728@infosec.pubEnglish
    1·
    7 days ago

    I have a project on Forgejo and I’ve needed to set up a runner for compilation but I’ve been very confused so far on how everything works.

    All I’ve been able to do is make a runner and connect it to my Forgejo instance, but I didn’t really know what to do from there.

  • CameronDev@programming.devEnglish
    1·
    7 days ago

    I can’t find it right now, but there used to be a warning about not self-hosting runners for public repos. Anyone could fork your repo, and the fork would inherit your runners, and then they could change the pipeline to RCE on your runner.

    Has that been fixed?

    I went to a completely private gitlab instead, with mirroring up to github for anything that needed to be public.

    Edit: seems to maybe not be an issue anymore, at the very least it doesn’t seem to affect that repo. Still, for anyone else, make sure forks and MRs can’t cause action to run automatically on your runner, because that would be very bad.

  • ikidd@lemmy.worldEnglish
    0·
    7 days ago

    I like that. I tried to get Actions in Forgejo working and that was a dead-end. So I’ve been using act manually.

    Appreciate the writeup.

      • ikidd@lemmy.worldEnglish
        0·
        6 days ago

        actions/setup-java@v4 would fail trying to find the java setup script at Forgejo’s runner source repo, and apparently it wasn’t there when I went to look. I’ll look at it another time when maybe all the backend is put together or there’s a way I can host the actions locally so I’m not relying on outside sources that might pollute my CI output.

        • arcayne@lemmy.todayEnglish
          0·
          6 days ago

          With both Gitea and Forgejo, sometimes you need to hardcode the action URL, like:

          https://github.com/actions/setup-java@v4
          • ikidd@lemmy.worldEnglish
            0·
            5 days ago

            I followed where it was going and it was a forgejo repo where there were some action sets but not that one. I figured they were using their own sets and hadn’t gotten around to java yet.

            • arcayne@lemmy.todayEnglish
              1·
              5 days ago

              Well, yeah, thats why I’m saying if the action isn’t available directly from Forgejo, just write out the full action URL like the example in my last comment and pull it directly from GitHub. Most/all of the actions you’re pulling from Forgejo are originally forked from GitHub anyway. ¯\_(ツ)_/¯