From 6b53ab4413ea5453cf5e4c74e78638007a0c499e Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Fri, 13 Jun 2025 15:52:31 +0200
Subject: [PATCH] Add GitLab runner with debian docker for PM
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reviewed-by: Aleix Boné <abonerib@bsc.es>
Reviewed-by: Aleix Roca Nonell <aleix.rocanonell@bsc.es>
---
 m/tent/gitlab-runner.nix                       |   8 ++++++++
 secrets/tent-gitlab-runner-pm-docker-token.age | Bin 0 -> 623 bytes
 2 files changed, 8 insertions(+)
 create mode 100644 secrets/tent-gitlab-runner-pm-docker-token.age

diff --git a/m/tent/gitlab-runner.nix b/m/tent/gitlab-runner.nix
index 447c583..166b8ca 100644
--- a/m/tent/gitlab-runner.nix
+++ b/m/tent/gitlab-runner.nix
@@ -2,6 +2,7 @@
 
 {
   age.secrets.tent-gitlab-runner-pm-shell.file = ../../secrets/tent-gitlab-runner-pm-shell-token.age;
+  age.secrets.tent-gitlab-runner-pm-docker.file = ../../secrets/tent-gitlab-runner-pm-docker-token.age;
   age.secrets.tent-gitlab-runner-bsc-docker.file = ../../secrets/tent-gitlab-runner-bsc-docker-token.age;
 
   services.gitlab-runner = let sec = config.age.secrets; in {
@@ -20,6 +21,13 @@
           env
         '';
       };
+      gitlab-pm-docker = {
+        authenticationTokenConfigFile = sec.tent-gitlab-runner-pm-docker.path;
+        executor = "docker";
+        dockerImage = "debian:stable";
+      };
+
+      # For gitlab.bsc.es
       gitlab-bsc-docker = {
         # gitlab.bsc.es still uses the old token mechanism
         registrationConfigFile = sec.tent-gitlab-runner-bsc-docker.path;
diff --git a/secrets/tent-gitlab-runner-pm-docker-token.age b/secrets/tent-gitlab-runner-pm-docker-token.age
new file mode 100644
index 0000000000000000000000000000000000000000..6ce71b4d295043882819fa1c40a28fbfa3e75665
GIT binary patch
literal 623
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4H}#1yEmsINGfhr2
z%FOaFta2%=Fepj%&`-}y$xHQ3)OHRFv@{7!bM{D#3Q8&rcja=fFf7bTH4RJ5POD5Q
z^~$$&j`a5RNiRw?sVI!{EDQ-MH!^X}s&ol(_eHnO*)iPRBv7H$q$J6tG@>}fG)g}w
z!^}IS+)zI#z`!}htt`u}A~&ldz^}k8BD1pGF`3IT&m_RdGc(YyG^nc3Gt{KYEi)*m
z%)BJsL_aSjJ3p)<Dx}P(up+q7rySk33P*EeOGkx5cT1x*$3(B3Fh`FJivaJ?NORNh
zywGyv@Jc5i*Tn36%iJWd;%rOD&_FKp$`H%Klu!dd^RSSNd?QEWD({GlGSmDl)2Pg<
z$aG^%#~kf!gG$d(vru%~e1qMLQ_>Y&0}cJleacgk@?E_$%gb}Ui$a`?EJAYAiW42H
zii4d>ebV#uT?(t5f?T=MLbI~+Jaf_t^j(btUA3Juj4LdS%JUo(v&+nljYCttOPtCA
z9Ss8wqLR6Eb#)cW4Ff{`f?Z9E4Sj<Got+8|stWzf4RX!B{G$?0Gt2eEvW-l9wF`Yp
zt9-fgmfrI)7cFC(X5YB~tUd#)b57k{*MG`q*7I;~KCj<%WWq(?)2Y&Wp?^=eZ)%&E
z96qx}>A<ClkAJ>h+xqgV5$DHktZxpcsw<|ip1Qk?k4Io%iArv-AOFe=tvM~r-3k)T
Wl{yvf*+;%ry(4#d{v+uI_4xo7``Ii2

literal 0
HcmV?d00001