Fix runner

Author: Arnaud Tincelin

.github/workflows/test-private-runner.yml

@@ -27,17 +27,3 @@ jobs:
 
       - name: List environment variables
         run: env | sort
-
-      - name: Test Docker availability
-        run: |
-          docker --version
-          docker ps
-
-      - name: Run a simple container
-        run: |
-          docker run --rm hello-world
-
-      - name: Build sample application
-        run: |
-          echo "Building application..."
-          echo "Build completed successfully!"

acr.tf

@@ -1,3 +1,7 @@
+locals {
+  docker_image = "github-runner:${substr(filesha256("${path.module}/docker/Dockerfile"), 0, 7)}"
+}
+
 resource "azurerm_container_registry" "this" {
   name                = "githubrunner${var.unique_suffix}"
   resource_group_name = azurerm_resource_group.this.name
@@ -24,7 +28,7 @@ resource "azurerm_role_assignment" "acr_pull" {
 
 resource "terraform_data" "docker_runner_image" {
   triggers_replace = {
-    dockerfile_hash = filesha256("${path.module}/docker/Dockerfile")
+    dockerfile_hash = local.docker_image
     entrypoint_hash = filesha256("${path.module}/docker/entrypoint.sh")
     acr_name        = azurerm_container_registry.this.name
     rg_name         = azurerm_resource_group.this.name
@@ -36,7 +40,7 @@ resource "terraform_data" "docker_runner_image" {
         --resource-group ${self.triggers_replace.rg_name} \
         --registry ${self.triggers_replace.acr_name} \
         --image github-runner:latest \
-        --image github-runner:${substr(self.triggers_replace.dockerfile_hash, 0, 7)} \
+        --image ${self.triggers_replace.dockerfile_hash} \
         --file docker/Dockerfile \
         docker/
     EOT

docker/Dockerfile

@@ -1,5 +1,5 @@
 FROM ghcr.io/actions/actions-runner:2.330.0
 
-COPY entrypoint.sh entrypoint.sh
+COPY ./entrypoint.sh ./entrypoint.sh
 
-ENTRYPOINT [ "entrypoint.sh" ]
+ENTRYPOINT [ "./entrypoint.sh" ]

docker/entrypoint.sh

@@ -11,14 +11,22 @@ WORKDIR=${RUNNER_WORKDIR:-"/home/runner/_work"}
 echo "Repository: $GITHUB_REPOSITORY"
 echo "Labels: $LABELS"
 
+# https://docs.github.com/en/rest/actions/self-hosted-runners?apiVersion=2022-11-28#create-a-registration-token-for-a-repository
 echo "🔑 Requesting registration token from GitHub API..."
-REGISTRATION_TOKEN=$(curl -s -X POST \
-  -H "Authorization: token ${GITHUB_PAT}" \
-  -H "Accept: application/vnd.github.v3+json" \
-  "https://api.github.com/repos/${GITHUB_REPOSITORY}/actions/runners/registration-token" | jq -r .token)
+RESPONSE=$(curl -L -s -w "\n%{http_code}" -X POST \
+  -H "Authorization: Bearer ${GITHUB_PAT}" \
+  -H "X-GitHub-Api-Version: 2022-11-28" \
+  -H "Accept: application/vnd.github+json" \
+  "https://api.github.com/repos/${GITHUB_REPOSITORY}/actions/runners/registration-token")
+
+HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
+BODY=$(echo "$RESPONSE" | sed '$d')
+
+REGISTRATION_TOKEN=$(echo "$BODY" | jq -r .token)
 
 if [[ -z "$REGISTRATION_TOKEN" || "$REGISTRATION_TOKEN" == "null" ]]; then
   echo "❌ Failed to obtain registration token" >&2
+  echo "API Response (HTTP $HTTP_CODE): $BODY" >&2
   exit 1
 fi
 
@@ -31,6 +39,7 @@ echo "✅ Registration token received"
   --labels "$LABELS" \
   --work "$WORKDIR" \
   --unattended \
+  --ephemeral \
   --replace
 
 echo "✅ Runner configured"

main.tf

@@ -67,7 +67,7 @@ resource "azurerm_container_app_job" "this" {
 
   template {
     container {
-      image  = "${azurerm_container_registry.this.login_server}/github-runner:latest"
+      image  = "${azurerm_container_registry.this.login_server}/${local.docker_image}"
       name   = "github-runner"
       cpu    = 0.5
       memory = "1Gi"