fix(lint): run on the ephemeral runner without sudo or system pip

jfraeys commented

2026-10-02 20:12:24 -04:00

Owner

The lint job on PR #9 ran the full 15-minute timeout and was cancelled ('context deadline exceeded'). Two things in lint.yml could not work on the ephemeral runner regardless: the jobs run as forgejo-runner, which has no sudo (only the ansible user does), and Debian 12's system Python is externally managed (PEP 668).

Now: a venv built from requirements.txt, shellcheck from PyPI (shellcheck-py) instead of apt, and a per-step timeout-minutes (3 to 8) so a hang fails fast and names the step instead of consuming the whole job budget.

Tested: replayed the steps locally in a fresh Python 3.11 venv: shellcheck, yamllint and ansible-lint all pass (ansible-lint 17s). Not yet run on the runner. The original hang's exact step is still unconfirmed (logs aren't readable via the API), so if this run also stalls, the per-step timeout will show which step.

🤖 Generated with Claude Code

The lint job on PR #9 ran the full 15-minute timeout and was cancelled ('context deadline exceeded'). Two things in lint.yml could not work on the ephemeral runner regardless: the jobs run as forgejo-runner, which has no sudo (only the ansible user does), and Debian 12's system Python is externally managed (PEP 668). Now: a venv built from requirements.txt, shellcheck from PyPI (shellcheck-py) instead of apt, and a per-step timeout-minutes (3 to 8) so a hang fails fast and names the step instead of consuming the whole job budget. Tested: replayed the steps locally in a fresh Python 3.11 venv: shellcheck, yamllint and ansible-lint all pass (ansible-lint 17s). Not yet run on the runner. The original hang's exact step is still unconfirmed (logs aren't readable via the API), so if this run also stalls, the per-step timeout will show which step. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit

2026-10-02 20:12:24 -04:00

fix(lint): run on the ephemeral runner without sudo or system pip; add step timeouts

Lint / lint (pull_request) Successful in 1m33s

Details

9cc8402f71

The runner user has no sudo (only 'ansible' does) and Debian 12's system Python is
externally managed, so the apt shellcheck install and bare pip install could not work.
Use a venv from requirements.txt, with shellcheck from PyPI (shellcheck-py), and
per-step timeouts so a hang fails fast and names the step.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit 38eadd212d into main

2026-10-02 20:22:58 -04:00

jfraeys referenced this pull request from a commit

2026-10-02 20:22:59 -04:00

Merge pull request 'fix(lint): run on the ephemeral runner without sudo or system pip' (#10) from fix/lint-runner-no-sudo into main

Rows
Columns

fix(lint): run on the ephemeral runner without sudo or system pip #10