6c6f2d87fc
build-stream was failing on openssl-sys because the runner has glibc
libssl-dev but cargo cross-compiles to x86_64-unknown-linux-musl.
Adding \`openssl = { features = ["vendored"] }\` as a direct dep forces
openssl-src to build OpenSSL from source against musl, which feature-
unifies through reqwest's native-tls and any other openssl-sys consumer.
The vendored build needs perl + make at compile time — added them to
runner-bake-deps.sh. The runner already has build-essential for the C
compiler.
Note: the build-web "husky: not found" error in the same run looks
like a re-run of an old SHA, since main has \`npm ci --ignore-scripts\`
since d243c2e2. A fresh workflow_dispatch should clear it.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
51 lines
1.6 KiB
Bash
Executable file
51 lines
1.6 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
# Install the OS packages every deploy.yml job assumes are pre-baked
|
|
# on the forgejo-runner Incus container. Run once per runner; idempotent.
|
|
#
|
|
# Usage (from operator laptop):
|
|
# ssh -t srv-102v 'sudo bash -s' < scripts/bootstrap/runner-bake-deps.sh
|
|
#
|
|
# Or run directly on the R720:
|
|
# sudo bash scripts/bootstrap/runner-bake-deps.sh
|
|
set -euo pipefail
|
|
|
|
PKGS=(
|
|
# tarball compression for build artifacts
|
|
zstd
|
|
# rust musl-static target
|
|
musl-tools
|
|
# rust openssl-sys: pkg-config + libssl-dev for the glibc build,
|
|
# perl + make + gcc (build-essential below) for the vendored
|
|
# openssl-src crate which compiles OpenSSL from source against musl.
|
|
pkg-config
|
|
libssl-dev
|
|
perl
|
|
make
|
|
# ansible + postgres lib for community.postgresql modules
|
|
ansible
|
|
python3-psycopg2
|
|
python3-pip
|
|
# native node modules (mostly belt-and-braces — current deploy
|
|
# avoids them via NODE_ENV=production, but keep for safety)
|
|
build-essential
|
|
python3-dev
|
|
)
|
|
|
|
echo "→ baking deps onto forgejo-runner container"
|
|
incus exec forgejo-runner -- bash -c "
|
|
set -euo pipefail
|
|
DEBIAN_FRONTEND=noninteractive apt-get update -qq
|
|
DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends ${PKGS[*]}
|
|
"
|
|
|
|
echo
|
|
echo "→ verifying"
|
|
incus exec forgejo-runner -- bash -c '
|
|
for cmd in zstd musl-gcc pkg-config ansible-playbook python3; do
|
|
printf " %-20s " "$cmd:"
|
|
command -v "$cmd" || { echo MISSING ; exit 1 ; }
|
|
done
|
|
'
|
|
|
|
echo
|
|
echo "✓ runner deps baked. Re-run Veza deploy in Forgejo UI."
|