Docker image for CI runner

---

Based on Debian php:8.4-cli-bookworm.

Included packages

• aspell: 3.1.20
• Bats: 1.14.0
• Composer: 2.11.1
• Codecov: 0.8.0
• curl: 7.88.1
• Docker: 29.9.2
• Docker Buildx: 0.38.2
• Docker Compose: 5.7.0
• Git: 2.39.5
• GnuPG: 2.2.40
• jq: 1.6
• kcov: 43
• lsof: 4.95.0
• Lynx: 2.9.0
• Node.js: 26.13.0
• npm: 11.20.0
• npx: 11.20.0
• PHP: 8.4.27
• rsync: 3.2.7
• ShellCheck: 0.11.0
• shfmt: 3.14.1
• OpenSSH: 9.2
• tree: 2.1.0
• UnZip: 6.00
• Vim: 9.0
• Yarn: 1.22.22
• Zip: 3.0

Usage

Make sure to always pin the version of this image to the tag:

drevops/ci-runner:25.8.0

For testing purposes, you can use the canary tag:

drevops/ci-runner:canary

When using in GitHub Actions, make sure to add a fix for the overwritten $HOME:

name: Test

jobs:
  test:
    runs-on: ubuntu-latest

    container:
      image: drevops/ci-runner:25.8.0

    steps:
      - name: Preserve $HOME set in the container
        run: echo HOME=/root >> "$GITHUB_ENV" # https://github.com/actions/runner/issues/863

      - name: Check out the repo
        uses: actions/checkout@v5

Testing

This project uses Goss (via dgoss) to test the image environment from the host. The image itself does not bundle Goss. To run the tests locally:

# Build the image
docker build -t drevops/ci-runner:test-ci .

# Run tests
dgoss run -i drevops/ci-runner:test-ci

Note for ARM64 systems (Apple Silicon): The image builds natively on arm64, so dgoss needs the Linux arm64 goss binary inside the container. Install these goss binaries:

# Create bin directory
mkdir -p ~/bin

# Download macOS ARM64 goss binary for local use
curl -L "https://github.com/goss-org/goss/releases/download/v0.4.9/goss-darwin-arm64" -o ~/bin/goss
chmod +x ~/bin/goss

# Download Linux ARM64 goss binary for container testing
curl -L "https://github.com/goss-org/goss/releases/download/v0.4.9/goss-linux-arm64" -o ~/bin/goss-linux-arm64
chmod +x ~/bin/goss-linux-arm64

# Download dgoss wrapper
curl -L "https://github.com/goss-org/goss/releases/download/v0.4.9/dgoss" -o ~/bin/dgoss
chmod +x ~/bin/dgoss

# Run tests with correct binary
export GOSS_PATH=~/bin/goss-linux-arm64
~/bin/dgoss run -i drevops/ci-runner:test-ci

Maintenance and releasing

Versioning

This project uses Year-Month-Patch versioning:

• YY: Last two digits of the year, e.g., 25 for 2025.
• m: Numeric month, e.g., April is 4.
• patch: Patch number for the month, starting at 0.

Example: 25.4.2 indicates the third patch in April 2025.

Releasing

Releases are scheduled to occur at a minimum of once per month.

GitHub Actions builds the image for linux/amd64 and linux/arm64 and pushes it to Docker Hub with these tags:

• YY.m.patch tag - when a release tag is published on GitHub.
• latest - when a release tag is published on GitHub.
• canary - on every push to the main branch, after the tests pass.

Dependencies update

Renovate bot is used to update dependencies. It creates a PR with the changes and automatically merges it if CI passes. These changes are then released as a canary version.

---

This repository was created using the Scaffold project template