Create a Github runner #1
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Create a Github runner | |
| on: | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| environment: azure | |
| timeout-minutes: 15 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Azure authenticate | |
| uses: azure/login@v1 | |
| with: | |
| creds: '{"clientId":"${{ vars.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ vars.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ vars.AZURE_TENANT_ID }}"}' | |
| - name: Deploy runner | |
| run: | | |
| set -eu # fail on error | |
| RG_NAME="rg-cor-github-contributions" | |
| VM_NAME="vm-runner-$(date +%Y-%m-%d)" | |
| VNET_NAME="vnet-cor-github-contributions" | |
| SUBNET_NAME="snet-github-runners" | |
| RUNNER_VERSION="2.311.0" | |
| # https://docs.github.com/en/rest/actions/self-hosted-runners?apiVersion=2022-11-28#create-a-registration-token-for-a-repository | |
| # you need read/write access on administrator on the repo | |
| GITHUB_TOKEN=${{ secrets.ACTION_TOKEN }} | |
| GITHUB_URL=${{ github.repository }} | |
| GITHUB_TOKEN_URL="https://api.github.com/repos/${{ github.repository }}/actions/runners/registration-token" | |
| RUNNER_TOKEN=$(curl -sX POST -H "Authorization: token ${GITHUB_TOKEN}" ${GITHUB_TOKEN_URL} | jq -r .token) | |
| function delete_vm() { | |
| local NAME=$1 | |
| local RG_NAME=$2 | |
| local DISK_ID=$(az vm show --name $NAME --resource-group $RG_NAME --query storageProfile.osDisk.managedDisk.id -o tsv) | |
| az vm delete --yes --name $NAME --resource-group $RG_NAME | |
| az disk delete --yes --ids $DISK_ID | |
| az network nic delete --name "${NAME}VMNic" --resource-group $RG_NAME | |
| az network nsg delete --name "${NAME}NSG" --resource-group $RG_NAME | |
| } | |
| # delete old runners | |
| OLD_NAMES=$(az vm list --query "[?resourceGroup == '$RG_NAME'].name" -o tsv) | |
| for OLD_NAME in $OLD_NAMES; do | |
| delete_vm $OLD_NAME $RG_NAME | |
| done | |
| az vm create -g $RG_NAME -n $VM_NAME --public-ip-address "" --vnet-name $VNET_NAME --subnet $SUBNET_NAME --size Standard_B1ms --image Ubuntu2204 --generate-ssh-keys --assign-identity [system] --enable-agent true --enable-auto-update true | |
| az vm run-command create --name "Install-Deps" -g $RG_NAME --vm-name $VM_NAME --script 'apt-get update && apt-get install -y unzip git' | |
| az vm run-command create --name "Install-Docker" -g $RG_NAME --vm-name $VM_NAME --script 'curl -sSL https://get.docker.io/ | sh' | |
| az vm run-command create --name "Install-Agent" -g $RG_NAME --vm-name $VM_NAME --timeout-in-seconds 3600 --script 'export RUNNER_ALLOW_RUNASROOT="1" && mkdir actions-runner && cd actions-runner && curl -L -s https://github.com/actions/runner/releases/download/v$VERSION/actions-runner-linux-x64-$VERSION.tar.gz | tar xz && ./config.sh --url https://github.com/$URL --token $TOKEN --unattended && ./run.sh & ' --parameters VERSION=$RUNNER_VERSION URL=$GITHUB_URL TOKEN=$RUNNER_TOKEN |