This project moved over to radicle and the GitHub repository has been archived.

Follow this link to get to the new repository.

This is a small CI sytem for git repos.

Credentials are no longer being read from the repository. Please update your projects and environment accodringly!

This CI consists of a git 'post-receive' hook, a worker script and a systemd timer and scripts for automated updated rebuilds.

This is not meant to be used in big development environments for many users and may not scale well for such environments.

This CI is entirely written as bash. All builds run in podman containers so allowing own build scripts for the 'generic' pipeline are no security risk in my opinion.

The runtime for a build is limited to 2 hours and the moory limit is 1GB for now, then a still tunning container will be killed to avoid hanging workflow containers hanging around. You may change the timeout if you need to in the ci-build script.

NOTE: You must have enabled lingering for the user which uses this ci.

sudo loginctl enable-linger <USER>

On the host where the CI is installed you need to have at least podman installed and running and you have to enable lingering for the running user.

This CI uses podman specific features which may not be compatible with docker.

Put an apropriate config file (see examples) in .simple-ci and name it after the branch you want to build. (e.g. master.conf).

• In-repo build configuration files.
• No additional git repository solution neccessary.
• Can be run in any repository on any machine where you have ssh access to.
• Uses lock files to avoid concurrent builds of the same image to avoid race conditions.
• Runs in the (ssh) users context.
• Entirely written in bash.
• Highly extensible.
• Automatically integrates with FreeIPA and GSSAPI because it does generally not rely on external software for itself.
• Configurable remote host as a runner for a specific architecture. (Corrently out of the box supported are arm64, amd64 and riscv64)
• Supports generic builds with custom build scripts which securely run in a container.
• Supports git-crypt encrypted repositories. (For CI credentials for example.)
• Support container builds on a podman remote host as runner for e.g. a specific architecture.
• Supports git-crypt encrypted files in repositories.
• Logs the build process.
• Support in-repo configuration.
• Supports generic builds (inside a container).

• The git-hook does not wprk in radicle repositories, but the build script and the configurazion file can be used with radicle-native-ci to run all builds in a podman container.

• There is no scheduling right now. The build starts right after the commit is received, except the build is locked because of another concurrent run.