epicmorg/github-runner repository overview

⁠epicmorg/github-runner

GitHub Actions⁠ self-hosted runner images built by EpicMorg on our own epicmorg/debian:trixie-develop⁠ base (full build toolchain, prebuilt OpenSSL / ICU / curl / libpq under /usr/local/share/epicmorg). Same set of variants as epicmorg/teamcity-agent⁠.

⁠What's inside

Everything the project installs lives under /usr/local/share/epicmorg.

⁠Tags

Every tag is pushed to docker.io, quay.io and ghcr.io (epicmorg/github-runner:<tag> on each) - same digest everywhere.

⁠Usage

The runner is started by supervisord as root. On every start the entrypoint registers it (config.sh --unattended --replace) and then runs run.sh.

services:
  github-runner:
    image: epicmorg/github-runner:minimal
    restart: unless-stopped
    environment:
      GITHUB_URL: "https://github.com/your-org"
      GITHUB_TOKEN: "<registration token>"
      RUNNER_NAME: "runner-01"
      RUNNER_ALLOW_RUNASROOT: "1"
    volumes:
      - runner-work:/usr/local/share/epicmorg/github/actions-runner/_work
volumes:
  runner-work:

Volumes declared by the image: the work directory, the _diag directory and /var/log/supervisor. Registration tokens expire after about an hour; --replace re-registers the same name on restart.

⁠latest: building containers inside the runner

latest starts its own dockerd under supervisord (unix:///var/run/docker.sock, --iptables=false --bridge=none) and ships buildah / podman configured for fuse-overlayfs (BUILDAH_FORMAT=docker, BUILDAH_ISOLATION=docker). Run it privileged; /var/lib/docker, /var/lib/containers and /var/tmp are declared as volumes.

⁠Notes

• PHP inside the php* runners is the same build as epicmorg/php (NTS, php-fpm, no mod_php); see the php README⁠ for the OpenSSL / ICU / curl matrix per version. Debian php* packages are apt-pinned out.
• Unlike the TeamCity agents, minimal here has no JDK; android-sdk and atlassian-sdk bring their own.

⁠Links

• Source: EpicMorg/docker⁠ - issues and PRs welcome
• Tags float and are rebuilt weekly; pin by digest for reproducible builds: Tags, pinning and updates⁠
• CHANGELOG⁠ - License: MIT