secubox-deb/.gitea/workflows
CyberMind 5e8a2b02c1
ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178)
Phase A3 of the GitHub Actions -> Gitea Actions migration. All 12
workflows copied byte-identical from .github/workflows/ so Gitea Actions
on the self-hosted instance at gitea.gk2.secubox.in picks them up on
every push (once the pull mirror, blocked on #176, is live).

Compatibility:
  - runs-on: ubuntu-latest         matches act_runner ubuntu-latest label
  - uses: actions/checkout@v4 etc  auto-fetched via DEFAULT_ACTIONS_URL=github
                                   (set in /var/lib/gitea/custom/conf/app.ini
                                    during Phase A1)
  - Secrets NOT auto-imported by mirror — re-add per repo in Gitea
    Settings -> Actions -> Secrets (GPG_PRIVATE_KEY, DEPLOY_SSH_KEY, ...)
  - Workflows that shell out to `gh` (GitHub CLI) will fail until
    migrated to `tea` (Gitea CLI) — per-workflow follow-ups.

Source of truth remains .github/workflows/; this is a mirror. Divergence
between the two trees is a bug. README.md in the new dir captures the
contract.

Co-authored-by: CyberMind-FR <gandalf@Gk2.net>
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-17 10:56:49 +02:00
..
build-all-live-usb.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-eye-remote.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-image.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-installer-iso.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-live-usb.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-multiboot.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-packages.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
build-secubox-cli.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
license-check.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
publish-packages.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
README.md ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
release.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00
sync-all.yml ci: mirror .github/workflows -> .gitea/workflows (closes #177) (#178) 2026-05-17 10:56:49 +02:00

Gitea Actions workflows

This directory mirrors .github/workflows/ for the self-hosted Gitea Actions runner at gitea.gk2.secubox.in (board-internal CI).

Source of truth

.github/workflows/*.yml is the source of truth — workflows are edited there and mirrored here. The two trees should stay byte-identical; divergence is a bug.

Eventual goal: a single CI definition tree consumed by both runners. For now, the mirror is mechanical (cp) and tracked in PRs that touch both directories together.

Compatibility notes

  • runs-on: ubuntu-latest works because the act_runner registered on the dev box advertises the ubuntu-latest label (Phase B of the migration, separate ticket).
  • uses: actions/* references are auto-fetched from github.com thanks to DEFAULT_ACTIONS_URL = github in /var/lib/gitea/custom/conf/app.ini (set during Phase A1).
  • Secrets are NOT carried by repo mirroring — re-add in Gitea Settings → Actions → Secrets per repo: GPG_PRIVATE_KEY, DEPLOY_SSH_KEY, DEPLOY_KNOWN_HOSTS, etc.
  • Some workflows use gh (GitHub CLI) which is not installed by default on act_runner. Those jobs will fail visibly until they are migrated to tea (Gitea CLI) — to be addressed per-workflow.

Refs

  • Phase A1: Gitea Actions enabled in app.ini (done 2026-05-17)
  • Phase A2: pull mirror github → gitea — blocked on #176 (missing giteactl repo mirror verb)
  • Phase A3: this directory (#177)
  • Phase B: install + register act_runner (separate ticket TBD)