From c4e72ba3cb55ebc4ab4ecb43243d4aa8304dffcf Mon Sep 17 00:00:00 2001
From: Philip Haupt <“der.mad.mob@gmail.com”>
Date: Sat, 18 Oct 2025 16:39:28 +0200
Subject: [PATCH] dind

---
 gitea-runner/main.yaml       | 35 +++++++++++++++++++++++++----------
 gitea-runner/src/values.yaml |  4 ++--
 2 files changed, 27 insertions(+), 12 deletions(-)

diff --git a/gitea-runner/main.yaml b/gitea-runner/main.yaml
index dcc2fc4..b4bf366 100644
--- a/gitea-runner/main.yaml
+++ b/gitea-runner/main.yaml
@@ -63,7 +63,12 @@ spec:
         app.kubernetes.io/name: act-runner
     spec:
       containers:
-      - env:
+      - command:
+        - sh
+        - -c
+        - while ! nc -z localhost 2376 </dev/null; do echo 'waiting for docker daemon...';
+          sleep 5; done; /sbin/tini -- run.sh
+        env:
         - name: GITEA_INSTANCE_URL
           value: https://git.borninpain.de
         - name: GITEA_RUNNER_REGISTRATION_TOKEN
@@ -78,22 +83,30 @@ spec:
         - name: DOCKER_CERT_PATH
           value: /certs/client
         - name: DOCKER_TLS_VERIFY
-          value: "0"
-        image: docker.io/gitea/act_runner:0.2.11-dind-rootless
+          value: "1"
+        image: docker.io/gitea/act_runner:0.2.13
         imagePullPolicy: IfNotPresent
         name: act-runner
-        securityContext:
-          runAsUser: 1000
-          runAsGroup: 1000
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-              - ALL
         volumeMounts:
         - mountPath: /data
           name: data
         - mountPath: /config
           name: config
+        - mountPath: /certs
+          name: docker-certs
+      - env:
+        - name: DOCKER_TLS_CERTDIR
+          value: /certs
+        - mountPath: /certs
+          name: docker-certs
+        image: docker:23.0.6-dind
+        imagePullPolicy: IfNotPresent
+        name: docker-dind
+        securityContext:
+          privileged: true
+        volumeMounts:
+        - mountPath: /certs
+          name: docker-certs
       restartPolicy: Always
       securityContext:
         fsGroup: 1000
@@ -103,6 +116,8 @@ spec:
       - configMap:
           name: gitea-runner-act-runner-config
         name: config
+      - emptyDir: {}
+        name: docker-certs
   updateStrategy:
     type: RollingUpdate
   volumeClaimTemplates:
diff --git a/gitea-runner/src/values.yaml b/gitea-runner/src/values.yaml
index a4f1cce..4a47a86 100644
--- a/gitea-runner/src/values.yaml
+++ b/gitea-runner/src/values.yaml
@@ -12,7 +12,7 @@ image:
   # -- Specify the image name to use (relative to `image.repository`).
   name: gitea/act_runner
   # -- Overrides the image tag whose default is the chart appVersion.
-  tag: "0.2.11"
+  tag: "0.2.13"
   # -- Specify the image repository to use.
   repository: docker.io
   # -- Specify the image pull policy. Valid values are `Always`, `Never`, `IfNotPresent`.
@@ -32,7 +32,7 @@ runner:
   # Docker in Docker configuration for running Docker commands inside the runner.
   dockerDind:
     # -- Enable Docker in Docker with root user.
-    enabled: false
+    enabled: true
     # -- Docker DinD image repository and tag.
     image: docker:23.0.6-dind