Run Sized Linux checks on the existing Gitea runner

2026-10-09 18:46:33 -04:00
parent a1b40d1826
commit 67fe175ec7
6 changed files with 95 additions and 5 deletions
@@ -0,0 +1,10 @@
+# Node supports the pinned checkout action; application code remains Rust.
+FROM node:24-bookworm@sha256:934240a162082fd8b8a2f90cd5114446443f1eba1c5378f6687167ca405e6584 AS node-runtime
+FROM rust:1.88.0-bookworm@sha256:af306cfa71d987911a781c37b59d7d67d934f49684058f96cf72079c3626bfe0
+RUN rustup component add rustfmt clippy
+COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
+# A new runner workspace volume inherits this ownership. No setuid step or
+# Docker socket is needed in jobs, even with all capabilities dropped.
+RUN mkdir -p /workspace && chown 65532:65532 /workspace
+USER 65532:65532
+WORKDIR /workspace