app/drone-ci/deploy/runner-vm.hcl


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

job "drone-runner" {
  datacenters = ["neptune"]
  type = "system"

  group "runner-vm" {
    network {
      port "ssh" {
        static = 22544
      }
    }

    constraint {
      attribute = "${attr.unique.hostname}"
      operator = "="
      value = "caribou"
    }

    task "drone-runner-vm" {
      driver = "qemu"

      config {
        image_path = "local/drone-runner.qcow2"
        accelerator = "kvm"
        args = [
          "-drive", "index=1,file=fat:rw:/var/lib/nomad/alloc/${NOMAD_ALLOC_ID}/${NOMAD_TASK_NAME}/secrets,format=raw,media=disk",
          "-device", "e1000,netdev=user.0",
          "-netdev", "user,id=user.0,hostfwd=tcp::${NOMAD_PORT_ssh}-:22",
        ]
        port_map {
          ssh = 22
        }
      }

      artifact {
        source = "https://alex.web.deuxfleurs.fr/drone-runner.qcow2.zst"
        destination = "local/drone-runner.qcow2"
        mode = "file"
      }

      template {
        data = <<EOH
DRONE_RPC_SECRET={{ key "secrets/drone-ci/rpc_secret" | trimSpace }}
DRONE_RUNNER_NAME={{ env "attr.unique.hostname" }}
EOH
        destination = "secrets/secret_env"
      }

      resources {
        memory = 2000
      }
    }
  }
}