Document deploy ownership requirements for Gitea CI.
Deploy Ladill Mini / deploy (push) Successful in 32s
Deploy Ladill Mini / deploy (push) Successful in 32s
The deploy runner must own the app root so it can update the current symlink without sudo. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -33,11 +33,17 @@ Grant the app DB user `SELECT` on `ladilldb.platform_settings` only.
|
||||
|
||||
```bash
|
||||
sudo install -d -o deploy -g www-data /var/www/ladill-mini
|
||||
sudo install -d -o deploy -g www-data /var/www/ladill-mini/{releases,shared}
|
||||
sudo mysql -e "CREATE DATABASE ladill_mini CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
|
||||
sudo mysql -e "CREATE USER 'ladill_mini'@'127.0.0.1' IDENTIFIED BY '<pw>';"
|
||||
sudo mysql -e "GRANT ALL ON ladill_mini.* TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
|
||||
sudo mysql -e "GRANT SELECT ON ladilldb.platform_settings TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
|
||||
```
|
||||
|
||||
The Gitea deploy runner acts as `deploy`. The app root and `current` symlink must be
|
||||
owned by `deploy` (not root), or the release switch step will fail with
|
||||
`sudo: a password is required`.
|
||||
|
||||
## 3. Register OIDC client (platform)
|
||||
|
||||
```bash
|
||||
|
||||
Reference in New Issue
Block a user