mirror of
https://github.com/actions/runner.git
synced 2025-12-10 20:36:49 +00:00
148 lines
4.3 KiB
Bash
Executable File
148 lines
4.3 KiB
Bash
Executable File
#/bin/bash
|
|
|
|
set -e
|
|
|
|
#
|
|
# Downloads latest releases (not pre-release) runner
|
|
# Configures as a service
|
|
#
|
|
# Examples:
|
|
# RUNNER_CFG_PAT=<yourPAT> ./create-latest-svc.sh myuser/myrepo my.ghe.deployment.net
|
|
# RUNNER_CFG_PAT=<yourPAT> ./create-latest-svc.sh myorg my.ghe.deployment.net
|
|
#
|
|
# Usage:
|
|
# export RUNNER_CFG_PAT=<yourPAT>
|
|
# ./create-latest-svc scope [ghe_domain] [name] [user]
|
|
#
|
|
# scope required repo (:owner/:repo) or org (:organization)
|
|
# ghe_domain optional the fully qualified domain name of your GitHub Enterprise Server deployment
|
|
# name optional defaults to hostname
|
|
# user optional user svc will run as. defaults to current
|
|
#
|
|
# Notes:
|
|
# PATS over envvars are more secure
|
|
# Should be used on VMs and not containers
|
|
# Works on OSX and Linux
|
|
# Assumes x64 arch
|
|
#
|
|
|
|
runner_scope=${1}
|
|
ghe_hostname=${2}
|
|
runner_name=${3:-$(hostname)}
|
|
svc_user=${4:-$USER}
|
|
|
|
echo "Configuring runner @ ${runner_scope}"
|
|
sudo echo
|
|
|
|
#---------------------------------------
|
|
# Validate Environment
|
|
#---------------------------------------
|
|
runner_plat=linux
|
|
[ ! -z "$(which sw_vers)" ] && runner_plat=osx;
|
|
|
|
function fatal()
|
|
{
|
|
echo "error: $1" >&2
|
|
exit 1
|
|
}
|
|
|
|
if [ -z "${runner_scope}" ]; then fatal "supply scope as argument 1"; fi
|
|
if [ -z "${RUNNER_CFG_PAT}" ]; then fatal "RUNNER_CFG_PAT must be set before calling"; fi
|
|
|
|
which curl || fatal "curl required. Please install in PATH with apt-get, brew, etc"
|
|
which jq || fatal "jq required. Please install in PATH with apt-get, brew, etc"
|
|
|
|
# bail early if there's already a runner there. also sudo early
|
|
if [ -d ./runner ]; then
|
|
fatal "Runner already exists. Use a different directory or delete ./runner"
|
|
fi
|
|
|
|
sudo -u ${svc_user} mkdir runner
|
|
|
|
# TODO: validate not in a container
|
|
# TODO: validate systemd or osx svc installer
|
|
|
|
#--------------------------------------
|
|
# Get a config token
|
|
#--------------------------------------
|
|
echo
|
|
echo "Generating a registration token..."
|
|
|
|
base_api_url="https://api.github.com"
|
|
if [ -n "${ghe_hostname}" ]; then
|
|
base_api_url="https://${ghe_hostname}/api/v3"
|
|
fi
|
|
|
|
# if the scope has a slash, it's a repo runner
|
|
orgs_or_repos="orgs"
|
|
if [[ "$runner_scope" == *\/* ]]; then
|
|
orgs_or_repos="repos"
|
|
fi
|
|
|
|
export RUNNER_TOKEN=$(curl -s -X POST ${base_api_url}/${orgs_or_repos}/${runner_scope}/actions/runners/registration-token -H "accept: application/vnd.github.everest-preview+json" -H "authorization: token ${RUNNER_CFG_PAT}" | jq -r '.token')
|
|
|
|
if [ "null" == "$RUNNER_TOKEN" -o -z "$RUNNER_TOKEN" ]; then fatal "Failed to get a token"; fi
|
|
|
|
#---------------------------------------
|
|
# Download latest released and extract
|
|
#---------------------------------------
|
|
echo
|
|
echo "Downloading latest runner ..."
|
|
|
|
# For the GHES Alpha, download the runner from github.com
|
|
latest_version_label=$(curl -s -X GET 'https://api.github.com/repos/actions/runner/releases/latest' | jq -r '.tag_name')
|
|
latest_version=$(echo ${latest_version_label:1})
|
|
runner_file="actions-runner-${runner_plat}-x64-${latest_version}.tar.gz"
|
|
|
|
if [ -f "${runner_file}" ]; then
|
|
echo "${runner_file} exists. skipping download."
|
|
else
|
|
runner_url="https://github.com/actions/runner/releases/download/${latest_version_label}/${runner_file}"
|
|
|
|
echo "Downloading ${latest_version_label} for ${runner_plat} ..."
|
|
echo $runner_url
|
|
|
|
curl -O -L ${runner_url}
|
|
fi
|
|
|
|
ls -la *.tar.gz
|
|
|
|
#---------------------------------------------------
|
|
# extract to runner directory in this directory
|
|
#---------------------------------------------------
|
|
echo
|
|
echo "Extracting ${runner_file} to ./runner"
|
|
|
|
tar xzf "./${runner_file}" -C runner
|
|
|
|
# export of pass
|
|
sudo chown -R $svc_user ./runner
|
|
|
|
pushd ./runner
|
|
|
|
#---------------------------------------
|
|
# Unattend config
|
|
#---------------------------------------
|
|
runner_url="https://github.com/${runner_scope}"
|
|
if [ -n "${ghe_hostname}" ]; then
|
|
runner_url="https://${ghe_hostname}/${runner_scope}"
|
|
fi
|
|
|
|
echo
|
|
echo "Configuring ${runner_name} @ $runner_url"
|
|
echo "./config.sh --unattended --url $runner_url --token *** --name $runner_name"
|
|
sudo -E -u ${svc_user} ./config.sh --unattended --url $runner_url --token $RUNNER_TOKEN --name $runner_name
|
|
|
|
#---------------------------------------
|
|
# Configuring as a service
|
|
#---------------------------------------
|
|
echo
|
|
echo "Configuring as a service ..."
|
|
prefix=""
|
|
if [ "${runner_plat}" == "linux" ]; then
|
|
prefix="sudo "
|
|
fi
|
|
|
|
${prefix}./svc.sh install ${svc_user}
|
|
${prefix}./svc.sh start
|