From 9595a18f3a02413b6f792030600723372c308a35 Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Thu, 26 Mar 2026 11:32:52 -0500
Subject: [PATCH] refactor: rebase CI runner on Ubuntu 24.04, rename to ci-base
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Replace Alpine-based legion-runner with a minimal Ubuntu 24.04 image.
The act_runner binary is copied from the official image via multi-stage
build. Job-specific tooling (Ruby, Node, Python, etc.) belongs in
per-job container images specified via container: in workflows, not
in the base runner image.

Rename: legion-runner → ci-base
---
 servers/legion/apps/gitea-runner.yaml      |  4 +--
 servers/legion/k8s/gitea-runner/Dockerfile | 29 ++++++----------------
 2 files changed, 10 insertions(+), 23 deletions(-)

diff --git a/servers/legion/apps/gitea-runner.yaml b/servers/legion/apps/gitea-runner.yaml
index 9a73de6..1001469 100644
--- a/servers/legion/apps/gitea-runner.yaml
+++ b/servers/legion/apps/gitea-runner.yaml
@@ -17,7 +17,7 @@ spec:
     spec:
       initContainers:
         - name: register
-          image: registry.neuralplatform.ai/legion-runner:latest
+          image: registry.neuralplatform.ai/ci-base:latest
           workingDir: /data
           command: ["/bin/sh", "-c"]
           args:
@@ -47,7 +47,7 @@ spec:
               mountPath: /data
       containers:
         - name: runner
-          image: registry.neuralplatform.ai/legion-runner:latest
+          image: registry.neuralplatform.ai/ci-base:latest
           workingDir: /data
           command: ["act_runner", "daemon", "--config", "/data/config.yaml"]
           envFrom:
diff --git a/servers/legion/k8s/gitea-runner/Dockerfile b/servers/legion/k8s/gitea-runner/Dockerfile
index e35e120..7470bd7 100644
--- a/servers/legion/k8s/gitea-runner/Dockerfile
+++ b/servers/legion/k8s/gitea-runner/Dockerfile
@@ -1,24 +1,11 @@
-FROM gitea/act_runner:latest
+FROM gitea/act_runner:latest AS runner-bin
 
-USER root
+FROM ubuntu:24.04
 
-RUN apk add --no-cache \
-    bash \
-    git \
+COPY --from=runner-bin /bin/act_runner /bin/act_runner
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
     curl \
-    nodejs \
-    npm \
-    python3 \
-    py3-pip \
-    python3-dev \
-    gcc \
-    musl-dev \
-    linux-headers \
-    make \
-    ruby \
-    ruby-bundler \
-    ruby-dev \
-    build-base \
-    zlib-dev && \
-    ln -sf /usr/bin/node /usr/local/bin/node && \
-    ln -sf /usr/bin/npm /usr/local/bin/npm
+    git \
+    && rm -rf /var/lib/apt/lists/*