epicmorg/gitlab-runner repository overview

⁠epicmorg/gitlab-runner

GitLab⁠ self-hosted runner images built by EpicMorg on our own epicmorg/debian:trixie-develop⁠ base (full build toolchain, prebuilt OpenSSL / ICU / curl / libpq under /usr/local/share/epicmorg). Same set of variants as epicmorg/teamcity-agent⁠.

⁠What's inside

Everything the project installs lives under /usr/local/share/epicmorg.

⁠Tags

Every tag is pushed to docker.io, quay.io and ghcr.io (epicmorg/gitlab-runner:<tag> on each) - same digest everywhere.

⁠Usage

supervisord runs gitlab-runner run as root with the configuration in /usr/local/share/epicmorg/gitlab/runner/etc/gitlab-runner/config.toml (also reachable as /etc/gitlab-runner) and the work directory /usr/local/share/epicmorg/gitlab/runner/worker. The image does not register itself: keep config.toml in the volume and register once.

services:
  gitlab-runner:
    image: epicmorg/gitlab-runner:minimal
    restart: unless-stopped
    volumes:
      - runner-config:/usr/local/share/epicmorg/gitlab/runner/etc/gitlab-runner
      - runner-worker:/usr/local/share/epicmorg/gitlab/runner/worker
volumes:
  runner-config:
  runner-worker:

docker compose exec gitlab-runner gitlab-runner register \
  --url https://gitlab.example.com --token <runner authentication token> --executor shell

Volumes declared by the image: the config directory, the worker directory and /var/log/supervisor.

⁠latest: building containers inside the runner

latest starts its own dockerd under supervisord (unix:///var/run/docker.sock, --iptables=false --bridge=none) and ships buildah / podman configured for fuse-overlayfs (BUILDAH_FORMAT=docker, BUILDAH_ISOLATION=docker). Run it privileged; /var/lib/docker, /var/lib/containers and /var/tmp are declared as volumes.

⁠Notes

• PHP inside the php* runners is the same build as epicmorg/php (NTS, php-fpm, no mod_php); see the php README⁠ for the OpenSSL / ICU / curl matrix per version. Debian php* packages are apt-pinned out.
• Unlike the TeamCity agents, minimal here has no JDK; android-sdk and atlassian-sdk bring their own.

⁠Links

• Source: EpicMorg/docker⁠ - issues and PRs welcome
• Tags float and are rebuilt weekly; pin by digest for reproducible builds: Tags, pinning and updates⁠
• CHANGELOG⁠ - License: MIT