Docker in Docker Gitlab Runner
Runs a Gitlab Runner instance, along with all the necessary stuff to run Docker
containers, all inside a Docker container.
IMPORTANT: Read the security warnings below before you try this.
Change directory into a directory that you can use for volumes. In the example
below, the subdirectories gitlab-runner and docker are used for saving thegitlab-runner and the docker authentication credentials, respectively.
Therefore, these directories should only be readable by root.
Or, just omit the two -v options because the Dockerfile specifies that these two
directories can be used as volumes.
For Docker in Docker to work, you will need the --privileged flag.
docker run -d --restart=unless-stopped --name=gitlab-runner -v $PWD/gitlab-runner:/etc/gitlab-runner -v $PWD/docker:/root/.docker --privileged etnguyen03/dind-gitlab-runner
Then, you will need to
docker exec -it gitlab-runner /bin/sh
to get a shell within the container so that you can configure it.
Within this shell, run
gitlab-runner register
to register the runner. When requested, enter docker for the executor. Then, run
docker login
to log into Docker Hub. (If you won’t be using Docker Hub, then you
can probably omit this. However, you probably are.)
Then, run exit to exit the shell.
The runner is now ready for use.
Your Docker credentials are stored in plain text, and so is your Gitlab Runner token.
Docker-in-Docker is subject to privilege execution since you are using --privileged.
I’d only run this on a personal, properly firewalled and secured Gitlab instance.
But I don’t know, you do you. Don’t come after me if you get hacked. (See the GPL.)
Copyright © 2020 Ethan Nguyen
This program is free software: you can redistribute it and/or modify it under the terms
of the GNU General Public License as published by the Free Software Foundation, either
version 3 of the License, or (at your option) any later version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;
without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with this program.
If not, see https://www.gnu.org/licenses/.
