From 0c66aa5eb6b9f7234e0d7fb5be21ab46ec9541ca Mon Sep 17 00:00:00 2001 From: CTO Agent Date: Sat, 18 Jul 2026 15:46:54 +0000 Subject: [PATCH] fix: add security context to Forgejo runner for Docker socket access Run the forgejo-runner container as root (uid 0) to allow access to the Docker socket. This is required for Docker-in-Docker functionality needed by Forgejo Actions workflows. Without this, the runner fails with "permission denied" when trying to access /var/run/docker.sock. Co-Authored-By: Paperclip --- apps/forgejo-runner/forgejo-runner-deployment.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/apps/forgejo-runner/forgejo-runner-deployment.yaml b/apps/forgejo-runner/forgejo-runner-deployment.yaml index 30d4bc6..8f49028 100644 --- a/apps/forgejo-runner/forgejo-runner-deployment.yaml +++ b/apps/forgejo-runner/forgejo-runner-deployment.yaml @@ -18,6 +18,9 @@ spec: - name: runner image: code.forgejo.org/forgejo/runner:4.0.1 imagePullPolicy: IfNotPresent + securityContext: + runAsUser: 0 + runAsGroup: 0 command: - sh - -c