使用 Docker Compose 安装 Gitea

mkdir data config
sudo chown 1000:1000 data config

services:
  server:
    image: gitea/gitea:1.21-rootless
    container_name: gitea
    hostname: gitea
    restart: always
    user: 1000:1000
    volumes:
      - ./data:/var/lib/gitea
      - ./config:/etc/gitea
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "0.0.0.0:3000:3000"
      - "0.0.0.0:2222:2222"

docker compose up -d
docker compose logs -f

mkdir data
chown 1000:1000 data

services:
  server:
    image: gitea/gitea:latest
    container_name: gitea
    hostname: gitea
    restart: always
    environment:
    # - GITEA___server__PROTOCOL=http
    # - GITEA___server__DOMAIN=code.wangyan.cloud/
    # - GITEA___server__ROOT_URL=https://code.wangyan.cloud/
    # - GITEA___server__HTTP_ADDR=0.0.0.0
    # - GITEA___server__HTTP_PORT=3000
    # - GITEA___server__SSH_DOMAIN=wangyan.cloud/
    # - GITEA___server__SSH_PORT=22
    # - GITEA___server__LFS_START_SERVER=true
    # - GITEA__database__DB_TYPE=mysql
    # - GITEA__database__HOST=127.0.0.1:3306
    # - GITEA__database__NAME=gitea
    # - GITEA__database__USER=gitea
    # - GITEA__database__PASSWD=123456
    # - GITEA__mailer__ENABLED=true
    # - GITEA__mailer__PROTOCOL=smtp+starttls
    # - GITEA__mailer__SMTP_ADDR=smtp-mail.outlook.com
    # - GITEA__mailer__SMTP_PORT=587
    # - GITEA__mailer__FROM="No-Reply" <no-reply@outlook.com>
    # - GITEA__mailer__USER=no-reply@outlook.com
    # - GITEA__mailer__PASSWD=123456
      - USER_UID=1000
      - USER_GID=1000
    volumes:
      - ./data:/data
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
    ports:
      - "0.0.0.0:3000:3000"
      - "0.0.0.0:2222:22"

docker compose up -d
docker compose logs -f

# uid 和 gid 也可以随机不指定。
sudo groupadd -g 1100 git && \
sudo useradd -c "Git Version Control" -m -d /home/git -s /bin/bash -u 1100 -g 1100 git

# 将用户添加到docker用户组
sudo usermod -aG docker git

# gitea 是容器名称，请根据实际修改。
# 标准镜像需要加 "-u git" 指定用户，root 身份运行 docker exec 会报错。
cat <<"EOF" | sudo tee -a /etc/ssh/sshd_config
Match User git
  AuthorizedKeysCommandUser git
  AuthorizedKeysCommand /usr/bin/docker exec -i -u git gitea /usr/local/bin/gitea keys -e git -u %u -t %t -k %k
EOF

sudo systemctl restart sshd

cat <<"EOF" | sudo tee -a /etc/ssh/sshd_config
Match User git
  AuthorizedKeysCommandUser git
  AuthorizedKeysCommand /usr/bin/ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 /usr/local/bin/gitea keys -e git -u %u -t %t -k %k
EOF

sudo systemctl restart sshd

#docker-compose.yml
ports:
  - "127.0.0.1:2222:22"

#docker-compose.yml
environment:
  - USER_UID=1000
  - USER_GID=1000

# 生成 authorized_keys 文件
sudo -u git mkdir /home/git/.ssh/
sudo -u git ssh-keygen -f "/home/git/.ssh/idrsa" -t rsa -b 4096 -C "Gitea Host Key"
sudo -u git echo "$(cat /home/git/.ssh/idrsa.pub)" >> /home/git/.ssh/authorized_keys
sudo -u git chmod 600 /home/git/.ssh/authorized_keys

volumes:
  - /home/git/.ssh/:/data/git/.ssh

# SSH pubkey from git user
ssh-rsa <Gitea Host Key>

# other keys from users
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-1"...

# gitea 是容器名称，请根据实际修改。
cat <<"EOF" | sudo tee /home/git/docker-shell
#!/bin/sh
/usr/bin/docker exec -i -u git --env SSH_ORIGINAL_COMMAND="$SSH_ORIGINAL_COMMAND" gitea sh "$@"
EOF

sudo chmod +x /home/git/docker-shell
sudo usermod -s /home/git/docker-shell git

cat <<"EOF" | sudo tee /home/git/ssh-shell
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $@"
EOF

sudo chmod +x /home/git/ssh-shell
sudo usermod -s /home/git/ssh-shell git

# gitea 是容器名称，请根据实际修改。
# 与 shell 相比多了 $0
cat <<'EOF' | sudo tee /usr/local/bin/gitea
#!/bin/sh
/usr/bin/docker exec -i -u git --env SSH_ORIGINAL_COMMAND="$SSH_ORIGINAL_COMMAND" gitea sh $0 "$@"
EOF
sudo chmod +x /usr/local/bin/gitea

cat <<"EOF" | sudo tee /usr/local/bin/gitea
#!/bin/sh
ssh -p 2222 -o StrictHostKeyChecking=no git@127.0.0.1 "SSH_ORIGINAL_COMMAND=\"$SSH_ORIGINAL_COMMAND\" $0 $@"
EOF
sudo chmod +x /usr/local/bin/gitea

# 下载
wget https://gitea.com/gitea/act_runner/releases/download/v0.2.7/act_runner-0.2.7-linux-amd64
mv act_runner-0.2.7-linux-amd64 gitea-runner
chmod +x gitea-runner
./gitea-runner --version

# 导出默认配置文件
./gitea-runner generate-config > config.yaml

# 注册
# ./gitea-runner --config config.yaml register
./gitea-runner register \
 --no-interactive \
 --instance https://codes.wangyan.cloud/ \
 --token xx \
 --name gitea-runner

sudo docker pull gitea/act_runner:latest
sudo docker run --entrypoint="" --rm -it gitea/act_runner:latest act_runner generate-config > config.yaml

#vim config.yaml
cache:
enabled: true
dir: ""
# 使用步骤 1. 获取的 LAN IP
host: "192.168.8.17"
# 使用步骤 2. 获取的端口号
port: 3030

#vim docker-compose.yml
version: "3.8"
  services:
    runner:
    image: gitea/act_runner:nightly
    environment:
    CONFIG_FILE: /config.yaml
    GITEA_INSTANCE_URL: "http://119.29.17.197:3000"
    GITEA_RUNNER_REGISTRATION_TOKEN: "xx"
    GITEA_RUNNER_NAME: "gitea-runner"
    volumes:
    - ./config.yaml:/config.yaml
    - ./data:/data
    - /var/run/docker.sock:/var/run/docker.sock
    ports:
    - "3030:3030"

vim .gitea/workflows/demo.yaml

name: Gitea Actions Demo
run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
on: [push]
  
jobs:
 Explore-Gitea-Actions:
 runs-on: ubuntu-latest
 steps:
 - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."
 - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
 - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
 - name: Check out repository code
 uses: actions/checkout@v3
 - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
 - run: echo "🖥️ The workflow is now ready to test your code on the runner."
 - name: List files in the repository
 run: |
 ls ${{ gitea.workspace }}
 - run: echo "🍏 This job's status is ${{ job.status }}."