Fix Docker release runner provisioning #53

Merged

erik merged 1 commit from fix/task-8a6810c6-release-bootstrap into main

2026-10-13 13:50:53 -05:00

erik commented

2026-10-13 13:38:19 -05:00

Owner

Slugkit.com release run 43 fails before checkout because runs-on: docker selects the unavailable local-only forgejo-runner-node20-docker:20260625 image. On the same devserver runner, Erikvancraddock.com's Docker release run 80 successfully selected ubuntu-latest / public docker.io/library/node:20-bookworm and installed Docker CLI and Buildx in the publishing workflow.

Use that verified bootstrap path for Slugkit.com's normal release workflow. Install official Docker CLI/Buildx and check daemon/tool availability before tagging/building/publishing. This removes dependence on a manually provisioned local job image. Application source, publication credentials, multi-platform build, release tags and deployment remain unchanged. No container smoke/integration tests or testing runtime setup is added to CI/release workflows; the Docker setup is solely a publishing prerequisite.

Validation: bootstrap shell syntax, formatting and the full local pre-PR checks (352 tests) passed. Current-head PR CI and independent review are required before integration. The subsequent normal tag-triggered release will verify the repaired publishing path; no local/manual application publication is used.

Task: task-8a6810c6

Slugkit.com release run 43 fails before checkout because `runs-on: docker` selects the unavailable local-only `forgejo-runner-node20-docker:20260625` image. On the same devserver runner, Erikvancraddock.com's Docker release run 80 successfully selected `ubuntu-latest` / public `docker.io/library/node:20-bookworm` and installed Docker CLI and Buildx in the publishing workflow. Use that verified bootstrap path for Slugkit.com's normal release workflow. Install official Docker CLI/Buildx and check daemon/tool availability before tagging/building/publishing. This removes dependence on a manually provisioned local job image. Application source, publication credentials, multi-platform build, release tags and deployment remain unchanged. No container smoke/integration tests or testing runtime setup is added to CI/release workflows; the Docker setup is solely a publishing prerequisite. Validation: bootstrap shell syntax, formatting and the full local pre-PR checks (352 tests) passed. Current-head PR CI and independent review are required before integration. The subsequent normal tag-triggered release will verify the repaired publishing path; no local/manual application publication is used. Task: task-8a6810c6

erik added 1 commit

2026-10-13 13:38:19 -05:00

fix: bootstrap Docker tooling in the release workflow

CI / verify (pull_request) Successful in 38s

Details

ad7f6a645e

Task: task-8a6810c6

erik commented

2026-10-13 13:40:44 -05:00

Author

Owner

Review update

PR: Fix Docker release runner provisioning, open at ad7f6a645e7302ba11436564fe2d2033726b2e49.
Result: independent review approved, 0 blocking findings and 0 warnings. The sole release-workflow change removes the local-only job-image dependency and uses the exact bootstrap from Erikvancraddock.com's successful Docker release 80 on the same devserver runner.
Validation: local formatting, build/types, 352 tests and bootstrap Bash syntax passed; current-head PR CI run 44 succeeded. No application image was published locally or manually.
The bootstrap uses Docker's official signed Debian repository and verifies Docker daemon/CLI and Buildx availability before normal publication. Tag triggers, credentials, multi-platform builds and application source are unchanged. No integration or container smoke tests were added to CI or release workflows.

Acceptance criteria:

Installed/deployed baseline versions are recorded.
Local behavior and API discovery checks passed for the upgrade; the repair is workflow-only and local checks remain green.
Deployed metadata/spec agreement: partial; normal release and rollout remain pending integration of this repair.
Content/configuration preservation: application source and production storage, credentials and identity are unchanged by the workflow repair.

Next: integrate the approved workflow-only fix, retry publication through the normal tag-triggered release pipeline, and complete authorized GitOps rollout and deployed verification. Backup readiness is human-confirmed. Homelab diagnostic draft 161 was closed as superseded; no SSH/manual image repair is required for this pipeline fix.

### Review update - PR: [Fix Docker release runner provisioning](https://forge.caradoc.com/erik/slugkit.com/pulls/53), open at `ad7f6a645e7302ba11436564fe2d2033726b2e49`. - Result: independent review approved, 0 blocking findings and 0 warnings. The sole release-workflow change removes the local-only job-image dependency and uses the exact bootstrap from Erikvancraddock.com's successful Docker release 80 on the same devserver runner. - Validation: local formatting, build/types, 352 tests and bootstrap Bash syntax passed; current-head [PR CI run 44](https://forge.caradoc.com/erik/slugkit.com/actions/runs/44/jobs/0) succeeded. No application image was published locally or manually. - The bootstrap uses Docker's official signed Debian repository and verifies Docker daemon/CLI and Buildx availability before normal publication. Tag triggers, credentials, multi-platform builds and application source are unchanged. No integration or container smoke tests were added to CI or release workflows. Acceptance criteria: - [x] Installed/deployed baseline versions are recorded. - [x] Local behavior and API discovery checks passed for the upgrade; the repair is workflow-only and local checks remain green. - [ ] Deployed metadata/spec agreement: partial; normal release and rollout remain pending integration of this repair. - [x] Content/configuration preservation: application source and production storage, credentials and identity are unchanged by the workflow repair. Next: integrate the approved workflow-only fix, retry publication through the normal tag-triggered release pipeline, and complete authorized GitOps rollout and deployed verification. Backup readiness is human-confirmed. Homelab diagnostic draft 161 was closed as superseded; no SSH/manual image repair is required for this pipeline fix.

erik merged commit 20a0760c15 into main

2026-10-13 13:50:53 -05:00

erik deleted branch fix/task-8a6810c6-release-bootstrap

2026-10-13 13:50:53 -05:00

erik referenced this pull request from a commit

2026-10-13 13:50:54 -05:00

Merge pull request 'Fix Docker release runner provisioning' (#53) from fix/task-8a6810c6-release-bootstrap into main

erik referenced this pull request

2026-10-25 19:11:04 -05:00

Port browser security without changing reference API #56