- fc-dns: add OnePasswordItem CRD for DNS API keys + NetworkPolicy for Phase 0 auth hardening; bump dns-web image tag - fc-landing: rewrite landing HTML to remove CDN dependencies (air-gap safe); add preview.html standalone preview - github-runner: add TOOLCACHE_ARCH to install-ruby-toolcache.sh for arm64 support; add Dockerfile.arm64 for arm64 ARC runner image - docs/gx10-tenant-landing: per-user Deployment+IngressRoute manifests (andrew/dustin/erik/fit/matt) + CUTOVER-RUNBOOK.md Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
24 lines
957 B
Bash
24 lines
957 B
Bash
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
RUBY_VERSION="${RUBY_VERSION:-3.3.11}"
|
|
RUBY_MINOR="${RUBY_MINOR:-3.3}"
|
|
TOOLCACHE_ROOT="${TOOLCACHE_ROOT:-/opt/runner-toolcache}"
|
|
RUNNER_UID="${RUNNER_UID:-1001}"
|
|
RUNNER_GID="${RUNNER_GID:-1001}"
|
|
# Tool-cache arch label. Defaults to x64 (amd64 image, unchanged). The arm64
|
|
# Dockerfile passes TOOLCACHE_ARCH=arm64 so ruby/setup-ruby@v1 finds Ruby on
|
|
# aarch64 self-hosted runners.
|
|
TOOLCACHE_ARCH="${TOOLCACHE_ARCH:-x64}"
|
|
RUBY_PREFIX="${TOOLCACHE_ROOT}/Ruby/${RUBY_VERSION}/${TOOLCACHE_ARCH}"
|
|
|
|
mkdir -p "${TOOLCACHE_ROOT}/Ruby"
|
|
RUBY_CONFIGURE_OPTS="${RUBY_CONFIGURE_OPTS:---disable-install-doc --disable-yjit}" ruby-build "${RUBY_VERSION}" "${RUBY_PREFIX}"
|
|
|
|
touch "${TOOLCACHE_ROOT}/Ruby/${RUBY_VERSION}/${TOOLCACHE_ARCH}.complete"
|
|
ln -sfn "${RUBY_VERSION}" "${TOOLCACHE_ROOT}/Ruby/${RUBY_MINOR}"
|
|
|
|
"${RUBY_PREFIX}/bin/ruby" -v
|
|
chown -R "${RUNNER_UID}:${RUNNER_GID}" "${TOOLCACHE_ROOT}"
|
|
chmod -R a+rX "${TOOLCACHE_ROOT}"
|