K8s github runner

.github/workflows/test-kaniko.yml

@@ -0,0 +1,31 @@
+name: 🧪 Test building with Kaniko
+
+on:
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: [kaniko-worker]
+    container:
+      image: gcr.io/kaniko-project/executor:debug
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Build and push container test
+        run: |
+          # Write config file
+          AUTH=$(echo -n ${{ github.actor }}:${{ secrets.GITHUB_TOKEN }} | base64)
+          echo "{\"auths\": {\"ghcr.io\": {\"auth\": \"${AUTH}\"}}}" > /kaniko/.docker/config.json
+
+          # Configure git
+          export GIT_USERNAME="kaniko-bot"
+          export GIT_PASSWORD="${{ secrets.GITHUB_TOKEN }}"
+
+          # Build and push
+          /kaniko/executor --dockerfile="./images/ubi9.Dockerfile" \
+            --context="${{ github.repositoryUrl }}#${{ github.ref }}#${{ github.sha }}" \
+            --destination="ghcr.io/some-natalie/kubernoodles/kaniko-build:test" \
+            --push-retry 5 \
+            --image-name-with-digest-file /workspace/image-digest.txt

.github/workflows/tests.yml

@@ -1,37 +1,69 @@
 name: tests
 
-on:
-  push:
-    branches:
-      - main
-  pull_request:
-    branchs:
-      - 'feature/**'
-      - 'fix/**'
-      - 'refactor/**'
+on: workflow_dispatch
+# on:
+#   push:
+#     branches:
+#       - main
+#   pull_request:
+#     branchs:
+#       - 'feature/**'
+#       - 'fix/**'
+#       - 'refactor/**'
 
 
 jobs:
   test:
-    runs-on: self-hosted
+    runs-on: arc-runner-set
+    # runs-on: self-hosted
     name: Testes
     steps:
       - name: checkout PR merge commit
         uses: actions/checkout@v3
 
-      - name: Rodar um echo
-        run: echo 'teste'
+      - name: Executa um echo
+        run: echo 'Olá mundo!'
 
-      - name: Executa docker do host
+      - name: Metadatas
         run: |
-          # sudo apt-get install -y podman
-          docker pull alpine
-          docker images
+          cat /etc/os*release
+          # cat /etc/group
+          uname -a
+          id
+          pwd
+          ls -alh
+          nproc
+          free -h
+          # sudo id
+          cat $HOME/logs.txt || true
+          echo FOO-BAR > $HOME/logs.txt
+
+      - name: Testes sobre docker
+        run: |
+          # env | sort
+          # touch /dev/kvm
+          # which docker
+          # readlink -f $(which docker)
+          docker --version
+          # sudo docker info
           docker info
+          docker images
+          docker run --rm alpine cat /etc/os-release
+          docker images
 
-      - name: Run alpine OCI image with docker and metadatas
+      - name: Testes sobre docker build
         run: |
-          docker run alpine cat /etc/os*release
-          cat /etc/os*release
-          uname -a
-          nix flake metadata nixpkgs
+          id
+          docker build --tag custom-python .
+          docker images
+
+      - name: Testes sobre /dev/kvm
+        run: |
+          id
+          docker run --privileged=true --rm \
+          alpine sh -c 'id && touch /dev/kvm && stat /dev/kvm'
+
+      - name: Mais metadados
+        run: |
+           nix flake --version
+           nix flake metadata nixpkgs

Dockerfile

@@ -0,0 +1,32 @@
+FROM python:3.9-slim-buster
+
+
+# Set python environment variables
+ENV PYTHONDONTWRITEBYTECODE 1
+ENV PYTHONUNBUFFERED 1
+ENV PIP_NO_CACHE_DIR 0
+ENV PIP_DISABLE_PIP_VERSION_CHECK 1
+
+ENV USER app_user
+
+WORKDIR /home/app_user
+
+RUN apt-get update \
+ && DEBIAN_FRONTEND=noninteractive apt-get install --no-install-recommends --no-install-suggests -y \
+    ca-certificates \
+ && apt-get -y autoremove \
+ && apt-get -y clean  \
+ && rm -rf /var/lib/apt/lists/*
+
+RUN addgroup app_group \
+ && adduser \
+    --quiet \
+    --disabled-password \
+    --shell /bin/bash \
+    --home /home/app_user \
+    --gecos "User" app_user \
+    --ingroup app_group \
+ && chmod 0700 /home/app_user \
+ && chown --recursive app_user:app_group /home/app_user
+
+CMD ["/bin/bash"]