cc-ci

recipe-maintainers/cc-ci

Fork 0

Files

History

autonomic-bot d832b353e4

continuous-integration/drone/push Build is failing

Details

fix(gtea): UPGRADE_SECRET_PREP hook — pre-insert lfs_jwt_secret with correct 43-char format

Blocker 4 fix: abra `secret generate --all` uses .env.sample for length hints; the
lfs-plain-gitea PR has SECRET_LFS_JWT_SECRET_VERSION=v1 COMMENTED OUT, so abra produces
a wrong-length secret. gitea requires exactly 43 chars (32 bytes base64 URL-safe); wrong
length → gitea fatals trying to save the JWT secret to the read-only Docker Config
app.ini → health check fails → swarm rolls back.

Fix: new UPGRADE_SECRET_PREP hook (meta.py) called before `abra secret generate --all`
in the upgrade path. abra's `--all` is idempotent (skips existing secrets), so the
correctly pre-inserted secret survives. gitea's recipe_meta.py implements the hook using
`docker secret create` directly to guarantee correct format regardless of .env.sample.

Also consumes machine-docs/BUILDER-INBOX.md (Adversary Blocker 4 digest).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-15 21:46:28 +00:00

perf

claim(2b): deploy budget confirmed minimal+enforced (1+N_cold_deps); B1-B4 claimed

2026-05-31 05:35:46 +00:00

architecture.md

fix(flake): make Hetzner the canonical cc-ci host target

2026-06-01 13:57:45 +00:00

baseline.md

chore: bootstrap cc-ci loop state

2026-05-26 21:07:31 +01:00

concurrency.md

fix(harness): run-keyed run-scoped state files — CONC-A1 (same-domain runs corrupted shared deploy-count)