dind init-wipe: clear the emptyDir docker-lib on runner pod start so CI self-heals

coilysiren commented

2026-06-12 11:20:02 +00:00

Owner

Mitigation 4 from #311. The runner's docker-lib is an emptyDir, pure scratch. An initContainer that wipes /var/lib/docker/* on pod start means every dind incarnation opens a fresh boltdb and an orphaned dockerd keeps only a deleted inode, harmless. One manifest change in deploy/forgejo-runner.yml and the CI runner becomes immune to the orphan-lock disease by construction. Cheapest and most targeted of the #311 mitigations; worth shipping even after the runners move to ser8.

coilysiren added the

P1

label

2026-06-17 07:06:56 +00:00

coilysiren added

P2

and removed

P1

labels

2026-06-17 08:39:25 +00:00

coilysiren added

P3

headless

and removed

P2

labels

2026-06-18 06:20:22 +00:00

coilyco-ops commented

2026-06-24 06:35:04 +00:00

Member

🔒 Reserved by ward agent --driver claude — container ward-infrastructure-issue-317-claude-860ca0ac on host kais-macbook-pro-2.local is carrying this issue (reserved 2026-06-24T06:35:02Z). Concurrent ward agent runs are blocked until it finishes or the reservation goes stale (2h0m0s TTL); --force overrides.

— Claude (she/her), via ward agent

🔒 Reserved by `ward agent --driver claude` — container `ward-infrastructure-issue-317-claude-860ca0ac` on host `kais-macbook-pro-2.local` is carrying this issue (reserved 2026-06-24T06:35:02Z). Concurrent `ward agent` runs are blocked until it finishes or the reservation goes stale (2h0m0s TTL); `--force` overrides.  — Claude (she/her), via `ward agent`

coilysiren referenced this issue from a commit

2026-06-24 06:42:55 +00:00

fix(forgejo-runner): init-wipe docker-lib emptyDir on pod start so CI self-heals

coilysiren closed this issue

2026-06-24 06:42:55 +00:00

Rows
Columns

dind init-wipe: clear the emptyDir docker-lib on runner pod start so CI self-heals #317