Document deploy ownership requirements for Gitea CI.
Deploy Ladill Mini / deploy (push) Successful in 32s
Deploy Ladill Mini / deploy (push) Successful in 32s
The deploy runner must own the app root so it can update the current symlink without sudo. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -33,11 +33,17 @@ Grant the app DB user `SELECT` on `ladilldb.platform_settings` only.
|
|||||||
|
|
||||||
```bash
|
```bash
|
||||||
sudo install -d -o deploy -g www-data /var/www/ladill-mini
|
sudo install -d -o deploy -g www-data /var/www/ladill-mini
|
||||||
|
sudo install -d -o deploy -g www-data /var/www/ladill-mini/{releases,shared}
|
||||||
sudo mysql -e "CREATE DATABASE ladill_mini CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
|
sudo mysql -e "CREATE DATABASE ladill_mini CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
|
||||||
sudo mysql -e "CREATE USER 'ladill_mini'@'127.0.0.1' IDENTIFIED BY '<pw>';"
|
sudo mysql -e "CREATE USER 'ladill_mini'@'127.0.0.1' IDENTIFIED BY '<pw>';"
|
||||||
sudo mysql -e "GRANT ALL ON ladill_mini.* TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
|
sudo mysql -e "GRANT ALL ON ladill_mini.* TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
|
||||||
|
sudo mysql -e "GRANT SELECT ON ladilldb.platform_settings TO 'ladill_mini'@'127.0.0.1'; FLUSH PRIVILEGES;"
|
||||||
```
|
```
|
||||||
|
|
||||||
|
The Gitea deploy runner acts as `deploy`. The app root and `current` symlink must be
|
||||||
|
owned by `deploy` (not root), or the release switch step will fail with
|
||||||
|
`sudo: a password is required`.
|
||||||
|
|
||||||
## 3. Register OIDC client (platform)
|
## 3. Register OIDC client (platform)
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
|
|||||||
Reference in New Issue
Block a user