.gitea/workflows/ci.yml

@@ -7,19 +7,19 @@ on:
 jobs:
   build-and-push-runner:
     name: Build & Publish Runner Image to Giteastry
-    runs-on: ubuntu-latest
+    runs-on: host
     steps:
       - name: Checkout Code
         uses: actions/checkout@v4
 
-      - name: Authentification Giteastry
+      - name: Login to Giteastry
         run: |
-          echo "${{ secrets.GITEA_TOKEN }}" | docker login container.rym.local -u ${{ gitea.actor }} --password-stdin
+          echo "${{ secrets.GITEA_TOKEN }}" | podman login container.rym.local -u ${{ gitea.actor }} --password-stdin
 
-      - name: Build Image Runner
+      - name: Build Runner Image
         run: |
-          docker build -t container.rym.local/rym/devsecops-runner:latest .
+          podman build -t container.rym.local/rym/devsecops-runner:latest .
 
-      - name: Push vers Giteastry
+      - name: Push to Giteastry
         run: |
-          docker push container.rym.local/rym/devsecops-runner:latest
+          podman push container.rym.local/rym/devsecops-runner:latest

Dockerfile

@@ -1,7 +1,6 @@
-# SOURCE INTERNE STRICTE (Giteastry)
-FROM container.rym.local/mirror/alpine:3.19
+FROM docker.io/alpine:3.19
 
-# Outillage pré-installé dans le runner central
+# Dépendances de base et sécurité
 RUN apk add --no-cache \
     bash \
     curl \
@@ -10,7 +9,8 @@ RUN apk add --no-cache \
     py3-pip \
     docker-cli
 
+# Outils DevSecOps pré-installés
 RUN pip install --no-cache-dir yamllint && \
-    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/v1.36.3/bin/linux/amd64/kubectl" && \
+    curl -sSLo /usr/local/bin/kubectl "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" && \
     curl -sSLo /usr/local/bin/helm "https://get.helm.sh/helm-v3.14.0-linux-amd64.tar.gz" && \
     chmod +x /usr/local/bin/kubectl