Dockerfile

FROM debian:11-slim AS runner-downloader

ARG RUNNER_VERSION=2.328.0

WORKDIR /runner

ARG TARGETARCH
RUN apt update && apt install -y --no-install-recommends curl ca-certificates && \
    case ${TARGETARCH} in \
      amd64) ARCH_SUFFIX="x64" ;; \
      arm64) ARCH_SUFFIX="arm64" ;; \
      *) echo "Unsupported architecture: ${TARGETARCH}" >&2; exit 1 ;; \
    esac && \
    curl -o actions-runner.tar.gz -L "https://github.com/actions/runner/releases/download/v${RUNNER_VERSION}/actions-runner-linux-${ARCH_SUFFIX}-${RUNNER_VERSION}.tar.gz" && \
    tar xzf actions-runner.tar.gz && \
    rm actions-runner.tar.gz && \
    apt purge -y --auto-remove curl ca-certificates && \
    rm -rf /var/lib/apt/lists/*

FROM debian:11-slim AS final

RUN set -eux; \
    apt update; \
    apt install -y --no-install-recommends \
        ca-certificates \
        curl \
        gnupg \
        bash \
        libicu-dev \
        libssl-dev; \
    install -m 0755 -d /etc/apt/keyrings; \
    curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc; \
    chmod a+r /etc/apt/keyrings/docker.asc; \
    echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/debian bullseye stable" > /etc/apt/sources.list.d/docker.list; \
    apt update; \
    apt install -y --no-install-recommends docker-ce-cli; \
    apt purge -y --auto-remove gnupg; \
    apt clean && rm -rf /var/lib/apt/lists/*

WORKDIR /runner
COPY --from=runner-downloader /runner .

ENV RUNNER_ALLOW_RUNASROOT=1

RUN cat <<EOF > ./entrypoint.sh
#!/bin/bash
set -e

if [ ! -f ".runner" ]; then
  echo "Configuring runner..."
  ./config.sh --url \$URL --token \$RUNNER_TOKEN --name \$RUNNER_NAME --unattended
else
  echo "Runner already configured. Skipping config."
fi

exec ./run.sh
EOF

RUN chmod +x ./entrypoint.sh

ENTRYPOINT ["./entrypoint.sh"]